role-qa-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute standard testing tools and CLI commands including
npm test,npx cucumber-js,jest,vitest, andpytest. It also provides a shell script template for validating test suite integrity and performing security audits on test code.\n- [EXTERNAL_DOWNLOADS]: The instructions reference the installation of various testing dependencies from official registries vianpm installandpip install, such aspytest-randomly,faker, and mutation testing tools likeStrykerandmutmut.\n- [SAFE]: The skill prioritizes security by establishing strict rules against hardcoded credentials and providing automated search patterns to detect sensitive data exposure. It includes educational examples of 'Bad' code containing dummy placeholders to illustrate security risks.\n- [SAFE]: While the skill contains strings like<script>alert(\"xss\")</script>and SQL injection payloads, these are explicitly categorized as realistic test data for edge-case validation and are handled safely within the role-playing context.
Audit Metadata