keycloak-tests
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: Multiple files within the evaluation directory, such as
evals/realm-export-about-to-be-committed-with-live-secrets/task.mdand associated JSON fixtures, contain hardcoded strings representing client secrets, SMTP passwords, and LDAP bind credentials. These values are used as synthetic data to evaluate an agent's ability to identify and sanitize production-adjacent information and do not represent a risk to the skill's operational security. - [COMMAND_EXECUTION]: The skill facilitates the use of the
testcontainerslibrary to programmatically manage Docker containers. This process involves executing shell commands to pull, start, and configure Keycloak instances in an isolated environment for integration testing. - [EXTERNAL_DOWNLOADS]: The instructions and code examples reference pulling official Keycloak images from the
quay.iocontainer registry and utilizing documentation and modules fromtestcontainers.com. These references target well-known and reputable services relevant to the skill's primary purpose of infrastructure testing.
Audit Metadata