python-pytest-patterns

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE] (LOW): Detected hardcoded database connection strings in references/integration-testing.md (e.g., postgresql://test:test@localhost/testdb). These are generic credentials for a local environment (localhost) used for instructional purposes and do not represent a leak of production or sensitive user data.
  • [EXTERNAL_DOWNLOADS] (LOW): The skill's documentation and scripts/run-tests.sh suggest installing several third-party Python libraries via pip. These packages, including pytest, pytest-cov, and testcontainers, are well-established tools in the Python ecosystem and are sourced from the standard Python Package Index (PyPI).
  • [COMMAND_EXECUTION] (LOW): The script scripts/generate-conftest.sh uses Bash here-documents to dynamically generate a Python configuration file (tests/conftest.py). The generation logic is based on fixed internal templates and does not incorporate untrusted external data, posing minimal risk of command or script injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:23 PM