currents-integration
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and configuration examples for integrating a well-known test analytics service (Currents.dev) into existing test suites.
- [COMMAND_EXECUTION]: The skill includes standard package installation commands (
npm i -D @currents/playwright) and test execution commands (npx pwc). These are expected for the skill's primary purpose of setting up a testing tool. - [CREDENTIALS_UNSAFE]: The skill correctly identifies that
recordKeyis a secret and explicitly instructs the user to never check it into version control, instead reading it from environment variables (process.env.CURRENTS_RECORD_KEY). This follows security best practices. - [EXTERNAL_DOWNLOADS]: The skill references official documentation for Currents.dev (
docs.currents.dev) and downloads standard packages from the official NPM registry. These are well-known and trusted sources in the context of web development tooling.
Audit Metadata