eve-verification-plans

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes numerous shell commands within its verification templates to perform environment setup, authentication, and service testing via the eve CLI tool.
  • [EXTERNAL_DOWNLOADS]: Employs curl to interact with application APIs and health endpoints for verification purposes. These operations are restricted to the environment-specific domains defined by the user.
  • [CREDENTIALS_UNSAFE]: The provided templates include logic to authenticate the eve CLI using environment variables. Importantly, the skill includes a security-positive conformance check that proactively scans the target application's source code for hardcoded secrets (e.g., sk-, ghp_) and committed .env files.
  • [COMMAND_EXECUTION]: Includes dynamic execution patterns for testing purposes, such as generating synthetic test fixtures using python3 and performing UI evaluations via agent-browser or Playwright.
  • [SAFE]: The overall design of the skill promotes security best practices by automating the verification of platform-standard secrets management and ensuring that no sensitive credentials are hardcoded in the application being tested.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 11:28 AM