project-testing-guidelines
Provides comprehensive guidelines for writing and managing Playwright E2E and pytest backend tests, ensuring effective testing practices.
Install this skill
or
74/100
Security score
The project-testing-guidelines skill was audited on Feb 28, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 146
Template literal with variable interpolation in command context
SourceSKILL.md
| 146 | const response = await fetch(`http://localhost:8000/test/get-user?user_id=${userId}`); |
medium line 12
Curl to non-GitHub URL
SourceSKILL.md
| 12 | curl -s http://localhost:8000/test/health | grep -q '"testing": true' && echo "✅ Test backend ready" || echo "❌ Test backend not running" |
medium line 24
Curl to non-GitHub URL
SourceSKILL.md
| 24 | curl -s http://localhost:5173 > /dev/null && echo "✅ Frontend ready" || echo "❌ Frontend not running" |
medium line 188
Webhook reference - potential data exfiltration
SourceSKILL.md
| 188 | | `/test/simulate-webhook` | POST | `{user_id, ...}` | Simulate Polar webhook | |
low line 12
External URL reference
SourceSKILL.md
| 12 | curl -s http://localhost:8000/test/health | grep -q '"testing": true' && echo "✅ Test backend ready" || echo "❌ Test backend not running" |
low line 24
External URL reference
SourceSKILL.md
| 24 | curl -s http://localhost:5173 > /dev/null && echo "✅ Frontend ready" || echo "❌ Frontend not running" |
low line 38
External URL reference
SourceSKILL.md
| 38 | - Frontend: `http://localhost:5173` |
low line 39
External URL reference
SourceSKILL.md
| 39 | - Backend: `http://localhost:8000` |
low line 146
External URL reference
SourceSKILL.md
| 146 | const response = await fetch(`http://localhost:8000/test/get-user?user_id=${userId}`); |
low line 178
External URL reference
SourceSKILL.md
| 178 | **Base URL**: `http://localhost:8000/test/` (requires `TESTING=true`) |
Scanned on Feb 28, 2026
View Security DashboardGitHub Stars 22
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
openclawtestingqa-engineerbackend-developerfrontend-developerproject-managerplaywrightdevelopmentproject management
mattnigh/skills_collection