loom-e2e-testing
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard testing frameworks and utilities from the official npm registry, including 'playwright', 'cypress', and '@faker-js/faker'. These are well-known, industry-standard tools for the stated purpose of the skill.
- [COMMAND_EXECUTION]: Provides standard initialization and installation commands such as 'npm init playwright@latest' and 'npm install cypress --save-dev'. These commands are expected for setting up the environment and do not involve suspicious parameters or unknown sources.
- [CREDENTIALS_UNSAFE]: Includes placeholder authentication data (e.g., 'test@example.com', 'password123') and simulated payment information (e.g., '4242424242424242', which is the standard Stripe test card number). These are clearly identified as test data for demonstration purposes and do not represent a leak of sensitive production credentials.
- [DATA_EXFILTRATION]: While the code examples include network operations (e.g., 'request.post', 'page.goto', 'page.route'), these are fundamental features of E2E testing frameworks used to simulate user interactions and verify API responses within the local application environment.
Audit Metadata