API Test Automation
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, instructions, and templates are coherent with its stated purpose of generating and running API tests; it does not request unrelated credentials or install arbitrary code.
This skill appears to do what it says: generate test workspaces, run tests (when asked), and build reports. Before using it: (1) review generated test cases and pre-request/post-assert scripts so they don't send unintended mutating calls or reveal secrets; (2) avoid running tests against production-like endpoints unless you explicitly want to and have confirmed safety; (3) supply credentials (tokens) via environment files or CI secrets rather than embedding them into cases; (4) ensure the chosen runner (newman/node/python/pytest) is installed in the target environment; and (5) inspect any modifications you make to templates for custom network targets — there are no hidden endpoints in the provided files, but generated cases will use whatever base_url you or the input spec provide.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.