eve-verification-plans
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes numerous shell commands within its verification templates to perform environment setup, authentication, and service testing via the
eveCLI tool. - [EXTERNAL_DOWNLOADS]: Employs
curlto interact with application APIs and health endpoints for verification purposes. These operations are restricted to the environment-specific domains defined by the user. - [CREDENTIALS_UNSAFE]: The provided templates include logic to authenticate the
eveCLI using environment variables. Importantly, the skill includes a security-positive conformance check that proactively scans the target application's source code for hardcoded secrets (e.g.,sk-,ghp_) and committed.envfiles. - [COMMAND_EXECUTION]: Includes dynamic execution patterns for testing purposes, such as generating synthetic test fixtures using
python3and performing UI evaluations viaagent-browseror Playwright. - [SAFE]: The overall design of the skill promotes security best practices by automating the verification of platform-standard secrets management and ensuring that no sensitive credentials are hardcoded in the application being tested.
Audit Metadata