api-testing

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install standard PHP testing frameworks and plugins from well-known sources via Composer. These include pestphp/pest, phpunit/phpunit, pestphp/pest-plugin-arch, and brianium/paratest. These are industry-standard tools for the PHP ecosystem.
  • [COMMAND_EXECUTION]: The skill includes instructions for common developer tasks, such as running test suites and installing framework components using command-line tools like ./vendor/bin/pest, ./vendor/bin/phpunit, and php artisan. These commands are expected within the context of a testing and development skill.
  • [CREDENTIALS_UNSAFE]: While code examples include sample credentials such as 'password123', these are used as literal strings for test assertions and database factories in a testing environment context. They serve as documentation placeholders and do not represent the exposure of sensitive production secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents methods for testing application security against common vulnerabilities like XSS and SQL injection. These examples are designed to help developers verify their application's guardrails and do not contain instructions that would compromise the agent's behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:28 PM
Security Audit — agent-trust-hub — api-testing