contract-testing

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the @pact-foundation/pact library, which is an industry-standard and reputable tool for contract testing.
  • [SAFE]: All sensitive configuration data, including API tokens and broker URLs, are managed through environment variables (e.g., process.env.PACT_BROKER_TOKEN) and GitHub secrets (${{ secrets.PACT_BROKER_TOKEN }}), ensuring that credentials are not hardcoded or exposed.
  • [SAFE]: Code examples provided in the documentation use placeholder values (e.g., 'token123') for authentication headers, which is a safe and common practice for educational templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 12:29 AM
Security Audit — agent-trust-hub — contract-testing