Is contract-test-generator safe to install?

SaferSkills independently audited contract-test-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

library/specializations/code-migration-modernization/skills/contract-test-generator/SKILL.md · 1 file

library/specializations/code-migration-modernization/skills/contract-test-generator/SKILL.md2.4 KB · Markdown

name: contract-test-generator

description: Generate contract tests for API migrations with consumer-driven contracts and provider verification

allowed-tools: ["Bash", "Read", "Write", "Grep", "Glob", "Edit"]

Contract Test Generator Skill

Generates contract tests for API migrations, supporting consumer-driven contracts, provider verification, and breaking change detection.

Purpose

Enable API contract testing for:

Consumer contract generation
Provider verification
Schema validation
Breaking change detection
Mock server generation

Capabilities

1. Consumer Contract Generation

Generate from API usage
Extract from tests
Build from specs
Support multiple formats

2. Provider Verification

Verify against contracts
Test all consumers
Check compatibility
Document failures

3. Schema Validation

Validate request schemas
Check response schemas
Verify data types
Enforce constraints

4. Breaking Change Detection

Detect field removals
Find type changes
Identify required additions
Flag compatibility issues

5. Mock Server Generation

Generate from contracts
Support stub responses
Handle scenarios
Enable development isolation

6. Contract Versioning

Track contract versions
Manage compatibility
Support migrations
Document changes

Tool Integrations

Tool	Purpose	Integration Method
Pact	Consumer-driven contracts	CLI
Spring Cloud Contract	Java contracts	CLI
Dredd	API validation	CLI
Prism	Mock server	CLI
WireMock	Mock server	CLI

Output Schema

{
  "generationId": "string",
  "timestamp": "ISO8601",
  "contracts": [
    {
      "consumer": "string",
      "provider": "string",
      "interactions": [
        {
          "description": "string",
          "request": {},
          "response": {}
        }
      ]
    }
  ],
  "verification": {
    "passed": "boolean",
    "results": []
  },
  "artifacts": {
    "contractFiles": [],
    "mockServerConfig": "string"
  }
}

Integration with Migration Processes

api-modernization: Contract verification
monolith-to-microservices: Service contracts

openapi-generator: Spec generation
api-compatibility-analyzer: Breaking changes

regression-detector: Regression prevention
cross-team-integrator: Contract coordination

contract-test-generator— agent skill

Is contract-test-generator safe to install?

Contract Test Generator Skill

Purpose

Capabilities

1. Consumer Contract Generation

2. Provider Verification

3. Schema Validation

4. Breaking Change Detection

5. Mock Server Generation

6. Contract Versioning

Tool Integrations

Output Schema

Integration with Migration Processes

Audit the pieces. Scan the whole. Decide.

Is contract-test-generator safe to install?

Contract Test Generator Skill

Purpose

Capabilities

1. Consumer Contract Generation

2. Provider Verification

3. Schema Validation

4. Breaking Change Detection

5. Mock Server Generation

6. Contract Versioning

Tool Integrations

Output Schema

Integration with Migration Processes

Related Skills

Related Agents

Audit the pieces. Scan the whole. Decide.