k6-load-testing
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected. The skill focuses on legitimate performance testing workflows.
- [EXTERNAL_DOWNLOADS]: The skill's CI integration reference documentation provides instructions to install k6 from its official repository (dl.k6.io) and fetch signing keys from the Ubuntu keyserver (keyserver.ubuntu.com). These are recognized as well-known technology services.
- [SAFE]: The skill follows security best practices for credential management, instructing users to access sensitive data like API tokens via environment variables (
__ENV.API_TOKEN) and GitHub Secrets instead of hardcoding them. - [COMMAND_EXECUTION]: The documented shell commands for running k6 and processing its output with jq are standard for the described use case and do not involve suspicious or unauthorized operations.
Audit Metadata