testing-react
Pass
Audited by Gen Agent Trust Hub on Feb 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): Analysis of the skill instructions and reference materials revealed no malicious patterns, obfuscation, or unauthorized data access.
- [COMMAND_EXECUTION] (SAFE): The skill utilizes standard development tools (vitest, playwright) via npx in a manner consistent with their intended use for testing.
- [DATA_EXPOSURE] (SAFE): Credentials found in references/e2e-testing.md (testuser@example.com, TestPassword123!) are clearly marked as example data for a test fixture and do not constitute a leak of sensitive information.
- [INDIRECT_PROMPT_INJECTION] (SAFE): The skill presents a potential vulnerability surface as it ingests untrusted React code for review (SKILL.md), lacks boundary markers or sanitization, and has the capability to execute shell commands (npx vitest in SKILL.md), but is instructional in nature and does not contain malicious logic.
Audit Metadata