k6-load-testing
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides shell commands for installing the k6 tool and running test scripts.
- [PRIVILEGE_ESCALATION]: Includes instructions to use
sudofor adding official repositories and installing packages on Linux, which is standard procedure for system-wide software installation. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates data-driven testing by ingesting external files, creating a potential surface for indirect injection if those files are untrusted.
- Ingestion points: Processes
./users.json,./users.csv, and./products.jsoninSKILL.mdandreferences/detailed-guide.mdto parameterize requests. - Boundary markers: No explicit delimiters or boundary markers are used when interpolating file data into request bodies or URLs.
- Capability inventory: The skill uses network tools (
http.get,http.post,ws.connect) and browser automation (k6/browser) that operate on the ingested data. - Sanitization: No data validation or sanitization logic is present in the provided examples.
Audit Metadata