appbuilder-testing
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Adobe I/O CLI (
aio),npm, andjestto execute and manage tests. The provided integration test template specifically usesexecFileSyncwith an argument array, which is a security best practice to prevent shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill instructions and reference documents recommend using
npm installto set up necessary testing dependencies such as@testing-library/reactand@adobe/react-spectrum. These are standard, well-known packages from the vendor's ecosystem. - [CREDENTIALS_UNSAFE]: The skill includes a pre-deployment checklist (
references/checklist.md) that explicitly instructs the agent to verify that no real credentials or Bearer tokens are hardcoded in test files, promoting secure credential management. - [DATA_EXFILTRATION]: While integration tests involve invoking remote Adobe App Builder actions, this is the intended purpose of the skill and is performed using the authenticated
aioCLI environment. - [SAFE]: The skill is authored by Adobe and exclusively utilizes Adobe-branded SDKs, official CLI tools, and established open-source testing libraries. All patterns and templates provided are consistent with standard professional development workflows.
Audit Metadata