skills/ilandahan/aid/role-qa-engineer/Gen Agent Trust Hub

role-qa-engineer

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the agent to execute standard testing tools and CLI commands including npm test, npx cucumber-js, jest, vitest, and pytest. It also provides a shell script template for validating test suite integrity and performing security audits on test code.\n- [EXTERNAL_DOWNLOADS]: The instructions reference the installation of various testing dependencies from official registries via npm install and pip install, such as pytest-randomly, faker, and mutation testing tools like Stryker and mutmut.\n- [SAFE]: The skill prioritizes security by establishing strict rules against hardcoded credentials and providing automated search patterns to detect sensitive data exposure. It includes educational examples of 'Bad' code containing dummy placeholders to illustrate security risks.\n- [SAFE]: While the skill contains strings like <script>alert(\"xss\")</script> and SQL injection payloads, these are explicitly categorized as realistic test data for edge-case validation and are handled safely within the role-playing context.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 03:46 PM