The Agent Skills Directory

[SAFE]: The skill is a template and coordination tool for QA workflows. No malicious patterns, obfuscation, or unauthorized access attempts were detected in the instructions or metadata.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill incorporates a mandatory PII policy that includes regex scanning to ensure real email, phone, and payment data are not used in test fixtures. It also correctly identifies environment secrets as placeholders without hardcoding any credentials.
[EXTERNAL_DOWNLOADS]: The skill references documentation for industry-standard testing tools including Faker.js, Vitest, Playwright, and Testcontainers. These references point to official and well-known service domains.
[COMMAND_EXECUTION]: While the skill's configuration allows the use of the Bash tool, the instructions themselves do not contain any arbitrary or dangerous shell commands. The workflow focuses on strategy definitions and YAML output generation.
[INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing fixture files via Grep and Glob to identify PII, which serves as a security validation step. It does not interpolate untrusted data into instructions in a way that would suggest a vulnerability.

qa-test-data-environment