e2e-test-service-management

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a well-documented set of management scripts and instructions for a local development environment. It uses standard tools like make, docker-compose, and pnpm for service orchestration.
  • [COMMAND_EXECUTION]: The skill includes shell commands and a utility script (test-services.sh) that execute make, docker, and curl. These are standard development operations for the stated purpose of managing E2E test services.
  • [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies such as postgres:15-alpine from Docker Hub and common development tools (Rust, Node.js). These are well-known and trusted sources in the context of software development.
  • [CREDENTIALS_UNSAFE]: The documentation provides examples of how to set environment variables like OPENAI_API_KEY. It correctly advises users to use placeholders (e.g., sk-your-key-here) and suggests using .env.local for actual secrets, which is a standard security best practice to prevent accidental credential leakage in source control.
  • [DATA_EXFILTRATION]: No patterns of data exfiltration were found. Network operations (via curl) are restricted to local health checks (localhost).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 03:53 AM