cucumber-skill
Fail
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for Behavior Driven Development (BDD) testing using Cucumber, a standard industry framework.
- [EXTERNAL_DOWNLOADS]: The skill references standard package managers (Maven and npm) for installing testing frameworks and dependencies. This is expected behavior for developer-oriented tools.
- [COMMAND_EXECUTION]: Provides standard commands for running tests locally, such as
mvn testandnpx cucumber-js. These are standard CLI operations for BDD execution. - [DATA_EXFILTRATION]: The skill includes instructions for cloud-based test execution connecting to
hub.lambdatest.com. This is the official Selenium Grid endpoint for the vendor (LambdaTest) and is required for the skill's primary functionality. This is a legitimate connection to a well-known service. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by advising users to manage authentication secrets using environment variables (
LT_USERNAME,LT_ACCESS_KEY) rather than hardcoding credentials. Example passwords in the Gherkin feature files are clearly dummy testing data.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata