The Agent Skills Directory

[SAFE]: The skill implements security best practices by providing mechanisms to isolate the test environment from sensitive user configuration files like ~/.mobify and dw.json. It correctly advises using /dev/null as a dummy path to prevent unintended credential access.
[SAFE]: All external dependencies and referenced entities (@salesforce, salesforce.com) are well-known technology organizations. This ensures a secure supply chain and minimizes risk from untrusted third-party services.
[SAFE]: Command execution is limited to standard Node.js test runners (Mocha, pnpm) and the project's own CLI binary (bin/run.js), which is appropriate for a local testing environment.
[SAFE]: The hardcoded token value ('test-token') in the MockAuthStrategy class is explicitly for mocking API responses and does not represent a leak of actual production credentials.

testing