contract-testing
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the
@pact-foundation/pactlibrary, which is an industry-standard and reputable tool for contract testing. - [SAFE]: All sensitive configuration data, including API tokens and broker URLs, are managed through environment variables (e.g.,
process.env.PACT_BROKER_TOKEN) and GitHub secrets (${{ secrets.PACT_BROKER_TOKEN }}), ensuring that credentials are not hardcoded or exposed. - [SAFE]: Code examples provided in the documentation use placeholder values (e.g., 'token123') for authentication headers, which is a safe and common practice for educational templates.
Audit Metadata