appbuilder-testing

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Adobe I/O CLI (aio), npm, and jest to execute and manage tests. The provided integration test template specifically uses execFileSync with an argument array, which is a security best practice to prevent shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill instructions and reference documents recommend using npm install to set up necessary testing dependencies such as @testing-library/react and @adobe/react-spectrum. These are standard, well-known packages from the vendor's ecosystem.
  • [CREDENTIALS_UNSAFE]: The skill includes a pre-deployment checklist (references/checklist.md) that explicitly instructs the agent to verify that no real credentials or Bearer tokens are hardcoded in test files, promoting secure credential management.
  • [DATA_EXFILTRATION]: While integration tests involve invoking remote Adobe App Builder actions, this is the intended purpose of the skill and is performed using the authenticated aio CLI environment.
  • [SAFE]: The skill is authored by Adobe and exclusively utilizes Adobe-branded SDKs, official CLI tools, and established open-source testing libraries. All patterns and templates provided are consistent with standard professional development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:08 AM