abtesting
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileOverall, the abtesting skill is logically aligned with its stated purpose of designing and analyzing AB tests with power calculations and significance testing. The footprint is proportionate: it uses standard API calls, relies on an API key via environment variable, and does not introduce unverifiable binaries or broad credential access. The primary security considerations are typical for API-driven analytics tools: protect the ABTEST_API_KEY, ensure data governance for the input/output data, and verify that external API calls are over secure channels with proper access controls. Given these factors, the skill is assessed as BENIGN with MEDIUM security risk due to API-key handling and external data flow considerations, but not suspicious or malicious.