web-push-tests
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and provided code snippets did not reveal any malicious patterns or security risks. The skill serves its stated purpose of providing a testing suite for Web Push API implementations.
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard software development packages such as
web-push,jsonwebtoken,@playwright/test, andvitestfrom the official NPM registry. It also references established push service endpoints from Google and Mozilla for testing the subscription lifecycle. - [COMMAND_EXECUTION]: The provided shell commands are for routine testing workflows, including running test runners and generating cryptographic keys using the
web-pushCLI utility. - [DATA_EXPOSURE]: The skill promotes secure development practices by explicitly instructing the user to store VAPID keys in environment variables and CI/CD secrets rather than hardcoding them in source code.
Audit Metadata