server-sent-events-tests
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for using standard developer tools such as Playwright and k6. The documentation directs users to official installation guides from well-known organizations (Microsoft and Grafana).
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing data received via server-sent event streams.
- Ingestion points: EventSource stream payloads parsed in browser tests (
SKILL.md) and k6 load tests (references/sse-load.md). - Boundary markers: The examples utilize specific event listeners (e.g.,
order_update) and structured data parsing (JSON.parse). - Capability inventory: Subprocess calls for the k6 CLI, browser automation through Playwright, and HTTP requests via the
requestslibrary. - Sanitization: Data is parsed directly for validation purposes without explicit sanitization, which is typical for a development-focused testing utility.
Audit Metadata