typo3-testing
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a legitimate development tool designed to facilitate TYPO3 extension testing. No malicious patterns such as prompt injection, persistence mechanisms, or unauthorized data exfiltration were discovered.
- [EXTERNAL_DOWNLOADS]: Setup and execution scripts reference and download trusted software packages from official repositories, including the TYPO3 Testing Framework, PHPUnit, and Playwright. Docker images are sourced from official registries like ghcr.io/typo3.
- [COMMAND_EXECUTION]: The skill includes the runTests.sh script, which provides a unified interface for running tests in containerized environments. This script performs expected operations like mounting the project directory and executing test commands, which is safe within the context of extension development.
- [CREDENTIALS_UNSAFE]: Some provided templates and CSV fixtures contain example credentials. These are explicitly for testing purposes in local or CI environments and are appropriately documented.
Audit Metadata