cypress-testing
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and referenced files follow industry best practices for Cypress testing. They focus on common developer tasks such as installation, configuration, and test authoring without introducing security risks.
- [EXTERNAL_DOWNLOADS]: Mentions well-known and trusted external resources including the official Cypress documentation, standard NPM packages (cypress, @testing-library/cypress), and official GitHub Actions (cypress-io/github-action). These references are documented neutrally and do not represent a security concern.
- [DATA_EXFILTRATION]: The skill explicitly advises against hardcoding sensitive data like passwords or credit card numbers in test files. It recommends using cy.env() and CI secrets, which is a standard security-conscious approach.
- [COMMAND_EXECUTION]: All shell commands mentioned (npm install, npx cypress run, npx cypress open) are standard development operations required for the stated purpose of the skill.
- [NO_CODE]: The skill primarily consists of instructional markdown and configuration examples; no standalone executable scripts are bundled with the skill that perform unauthorized or hidden actions.
Audit Metadata