regression-testing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the GitHub CLI (
gh) to trigger workflows, monitor execution progress, and manage repository artifacts. These are standard operations for CI/CD automation. - [EXTERNAL_DOWNLOADS]: Fetches Allure reporting configurations (
allurerc.mjs) from the vendor's official GitHub repository (upex-galaxy/agentic-qa-boilerplate). This is used to maintain report consistency across environments. - [CREDENTIALS_UNSAFE]: Orchestrates the management of sensitive credentials for Cloudflare R2, Supabase, and GitHub Actions. The skill provides clear instructions for the AI to set these secrets using authorized CLI tools (
gh secret set), following security best practices for CI/CD secret management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external test reports (Allure JSON, Playwright logs) to classify failures. This creates a surface for indirect prompt injection if test output is maliciously crafted; however, the impact is minimized as the data is processed within structured schemas for metrics and reporting purposes.
Audit Metadata