contract-testing
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions attempting to override agent behavior or bypass safety filters were detected. The content is strictly focused on testing documentation.
- [Data Exposure & Exfiltration] (SAFE): The skill does not access sensitive local files or hardcode credentials. It correctly uses environment variables (e.g., $PACT_BROKER_URL) for broker connectivity, which is a security best practice.
- [Unverifiable Dependencies] (SAFE): The code snippets reference the standard 'pact' Python library and the 'pact-broker' CLI tool. No suspicious third-party packages or untrusted sources are used.
- [Command Execution] (SAFE): The shell commands provided (pact-broker publish, can-i-deploy) are standard operations for the described task and do not involve privilege escalation or unauthorized system modifications.
- [Obfuscation] (SAFE): No hidden, encoded, or deceptive content (Base64, zero-width characters, etc.) was found in the skill or its metadata.
Audit Metadata