testcontainers
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats were detected in the skill's instructions or code examples. The skill follows industry standard practices for containerized integration testing.
- [COMMAND_EXECUTION]: The skill uses
npm installto set up dependencies, which is the standard method for Node.js package management. - [EXTERNAL_DOWNLOADS]: The skill downloads official and well-known libraries (
testcontainers,@testcontainers/postgresql) from the standard NPM registry. - [CREDENTIALS_UNSAFE]: While the skill contains hardcoded usernames and passwords (e.g., 'test'/'test' for PostgreSQL), these are explicitly within the context of a throwaway, local integration testing container and do not represent a credential exposure of production secrets.
Audit Metadata