testing-flow

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for running tests using bun test. This is a standard and expected workflow for testing TypeScript/JavaScript-based automation flows within the Robomotion developer environment.
  • [CREDENTIALS_UNSAFE]: Documentation in reference/integration-mode.md details how to manage credentials (e.g., AWS_SECRET_ACCESS_KEY, GEMINI_API_KEY) for integration tests using environment variables. This follows security best practices by avoiding hardcoded secrets and relying on established environment-based configuration.
  • [EXTERNAL_DOWNLOADS]: The skill references the @robomotion/sdk/testing package. This is a legitimate vendor resource belonging to the author 'robomotionio'.
  • [DATA_EXFILTRATION]: There are no indicators of unauthorized network operations or data exfiltration. The network operations described are limited to intended integration testing against documented service endpoints (e.g., WordPress, AWS, GitHub) using user-provided credentials.
  • [PROMPT_INJECTION]: The skill instructions focus on technical testing workflows and do not contain patterns intended to bypass AI safety filters or override system behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 01:26 PM
Security Audit — agent-trust-hub — testing-flow