gtm-testing
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to install dependencies (npm install), set up the browser environment (npx playwright install), and run locally generated test scripts (node scripts/test-tracking.js).
- [CREDENTIALS_UNSAFE]: The skill documentation refers to the use of sensitive authentication files, including 'gtm-credentials.json' and 'gtm-token.json', for interacting with the Google Tag Manager API.
- [EXTERNAL_DOWNLOADS]: The skill initiates the download of external libraries and the Chromium browser engine from the NPM registry and official Playwright sources.
- [COMMAND_EXECUTION]: Uses 'curl' to perform local connectivity checks against 'http://localhost:3000' to verify the development server status.
Audit Metadata