currents-integration

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill describes a standard integration process for a well-known third-party test analytics service (Currents.dev). All actions, such as package installation and configuration file creation, are consistent with the service's official documentation.
  • [EXTERNAL_DOWNLOADS]: The skill references official packages @currents/playwright and @currents/cypress from the NPM registry. These are the standard distribution channels for the integration tools described.
  • [COMMAND_EXECUTION]: The skill suggests using npx pwc and npx cypress-cloud run to execute test suites. These are standard CLI wrappers provided by the vendor to stream test results to their dashboard.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to read sensitive keys from environment variables (process.env.CURRENTS_RECORD_KEY) and providing a clear warning: 'The recordKey is the project's record-write secret
  • never check it into the repo.'
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:55 AM
Security Audit — agent-trust-hub — currents-integration