e2e-test-service-management
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-documented set of management scripts and instructions for a local development environment. It uses standard tools like
make,docker-compose, andpnpmfor service orchestration. - [COMMAND_EXECUTION]: The skill includes shell commands and a utility script (
test-services.sh) that executemake,docker, andcurl. These are standard development operations for the stated purpose of managing E2E test services. - [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies such as
postgres:15-alpinefrom Docker Hub and common development tools (Rust, Node.js). These are well-known and trusted sources in the context of software development. - [CREDENTIALS_UNSAFE]: The documentation provides examples of how to set environment variables like
OPENAI_API_KEY. It correctly advises users to use placeholders (e.g.,sk-your-key-here) and suggests using.env.localfor actual secrets, which is a standard security best practice to prevent accidental credential leakage in source control. - [DATA_EXFILTRATION]: No patterns of data exfiltration were found. Network operations (via
curl) are restricted to local health checks (localhost).
Audit Metadata