bruno-api-testing

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides various shell commands for using the bru CLI, including installing the package globally, running API test collections, generating HTML/JUnit reports, and passing environment variables.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of the @usebruno/cli package from the public npm registry. It also provides GitHub Actions workflow templates that utilize official and well-known actions such as actions/checkout, actions/setup-node, and actions/upload-artifact.
  • [REMOTE_CODE_EXECUTION]: Describes the core functionality of Bruno which allows the execution of JavaScript scripts (Chai.js) for pre-request logic and post-response assertions. It explicitly documents the CLI's sandbox modes, explaining that the developer mode allows scripts to access Node.js APIs like fs and require for advanced testing needs.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 04:44 AM