e2e-test

Warn

Audited by Socket on Feb 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The fragment outlines a coherent, multi-phase automated E2E testing workflow leveraging a browser automation CLI to validate UI interactions and DB state. It aligns with its stated purpose but exhibits non-trivial supply-chain and data-flow risks: reliance on external tooling, lack of version pinning, potential leakage via test artifacts, and broad automation that can execute substantial actions without per-step approvals. Mitigation should include explicit version pins, cryptographic integrity checks for dependencies, isolated CI execution, secrets management best practices, and clear handling/masking of test data artifacts. Overall risk is moderate with actionable steps to reduce exposure.

Confidence: 85%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 04:27 AM
Package URL
pkg:socket/skills-sh/coleam00%2Flink-in-bio-page-builder%2Fe2e-test%2F@f07e77bc0d22a862a7a9edd172044b03c09e9e97