cucumber-skill

Fail

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE]: The skill provides documentation and code snippets for Behavior Driven Development (BDD) testing using Cucumber, a standard industry framework.
  • [EXTERNAL_DOWNLOADS]: The skill references standard package managers (Maven and npm) for installing testing frameworks and dependencies. This is expected behavior for developer-oriented tools.
  • [COMMAND_EXECUTION]: Provides standard commands for running tests locally, such as mvn test and npx cucumber-js. These are standard CLI operations for BDD execution.
  • [DATA_EXFILTRATION]: The skill includes instructions for cloud-based test execution connecting to hub.lambdatest.com. This is the official Selenium Grid endpoint for the vendor (LambdaTest) and is required for the skill's primary functionality. This is a legitimate connection to a well-known service.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by advising users to manage authentication secrets using environment variables (LT_USERNAME, LT_ACCESS_KEY) rather than hardcoding credentials. Example passwords in the Gherkin feature files are clearly dummy testing data.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 29, 2026, 12:48 AM