Skip to main content

project-testing-guidelines

Provides comprehensive guidelines for writing and managing Playwright E2E and pytest backend tests, ensuring effective testing practices.

Install this skill

or
74/100

Security score

The project-testing-guidelines skill was audited on Feb 28, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 146

Template literal with variable interpolation in command context

SourceSKILL.md
146const response = await fetch(`http://localhost:8000/test/get-user?user_id=${userId}`);
medium line 12

Curl to non-GitHub URL

SourceSKILL.md
12curl -s http://localhost:8000/test/health | grep -q '"testing": true' && echo "✅ Test backend ready" || echo "❌ Test backend not running"
medium line 24

Curl to non-GitHub URL

SourceSKILL.md
24curl -s http://localhost:5173 > /dev/null && echo "✅ Frontend ready" || echo "❌ Frontend not running"
medium line 188

Webhook reference - potential data exfiltration

SourceSKILL.md
188| `/test/simulate-webhook` | POST | `{user_id, ...}` | Simulate Polar webhook |
low line 12

External URL reference

SourceSKILL.md
12curl -s http://localhost:8000/test/health | grep -q '"testing": true' && echo "✅ Test backend ready" || echo "❌ Test backend not running"
low line 24

External URL reference

SourceSKILL.md
24curl -s http://localhost:5173 > /dev/null && echo "✅ Frontend ready" || echo "❌ Frontend not running"
low line 38

External URL reference

SourceSKILL.md
38- Frontend: `http://localhost:5173`
low line 39

External URL reference

SourceSKILL.md
39- Backend: `http://localhost:8000`
low line 146

External URL reference

SourceSKILL.md
146const response = await fetch(`http://localhost:8000/test/get-user?user_id=${userId}`);
low line 178

External URL reference

SourceSKILL.md
178**Base URL**: `http://localhost:8000/test/` (requires `TESTING=true`)
Scanned on Feb 28, 2026
View Security Dashboard
Installation guide →