k6-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references utility libraries from the official k6 CDN (jslib.k6.io). This is a well-known and trusted source for the k6 ecosystem.
- [COMMAND_EXECUTION]: Provides standard commands for installing k6 via system package managers (Homebrew, APT, Chocolatey) and for executing scripts using the k6 CLI. These are required for the skill's primary function.
- [SAFE]: Instructions correctly emphasize the use of environment variables (__ENV) for sensitive data like API keys and passwords, preventing hardcoded credentials in scripts.
- [SAFE]: Promotes the use of SharedArray for data loading, which is a best practice for memory management in k6 and prevents accidental data exposure through per-VU copying.
Audit Metadata