api-contract-testing
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and template resource for implementing API contract testing. All provided code examples are standard for the intended purpose of verifying API interactions.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known, legitimate testing libraries such as @pact-foundation/pact, express-openapi-validator, REST Assured, and jsonschema. No untrusted or suspicious external resources are used.\n- [CREDENTIALS_UNSAFE]: Secret management practices in the examples are correct, demonstrating the use of environment variables and CI/CD secrets (e.g., PACT_BROKER_TOKEN) rather than hardcoded credentials.\n- [DATA_EXFILTRATION]: No evidence of unauthorized data transfer was found. Network operations are confined to testing API endpoints as part of the contract verification process.
Audit Metadata