e2e-testing-patterns
Guides implementation of expert-level end-to-end testing patterns, focusing on automation and decision frameworks for web applications.
Install this skill
Security score
The e2e-testing-patterns skill was audited on Jun 13, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 401 | customerEmail: `test-${uuid()}@example-test.com`, |
Template literal with variable interpolation in command context
| 415 | throw new Error(`Failed to create test order: ${await response.text()}`); |
Template literal with variable interpolation in command context
| 425 | await request.delete(`/api/internal/test/orders/${orderId}`, { |
Template literal with variable interpolation in command context
| 443 | await adminPage.goto(`/admin/orders/${order.id}`); |
Template literal with variable interpolation in command context
| 444 | await expect(adminPage.getByRole('heading', { name: `Order #${order.id}` })).toBeVisible(); |
Template literal with variable interpolation in command context
| 448 | await adminPage.waitForResponse(`**/api/orders/${order.id}`); |
Template literal with variable interpolation in command context
| 507 | ```yaml |
Access to .env file
| 320 | email: process.env.E2E_USER_EMAIL!, |
Access to .env file
| 321 | password: process.env.E2E_USER_PASSWORD!, |
Access to .env file
| 344 | email: process.env.E2E_ADMIN_EMAIL!, |
Access to .env file
| 345 | password: process.env.E2E_ADMIN_PASSWORD!, |
Access to .env file
| 410 | 'X-Test-API-Key': process.env.E2E_INTERNAL_API_KEY!, |
Access to .env file
| 426 | headers: { 'X-Test-API-Key': process.env.E2E_INTERNAL_API_KEY! }, |
Access to .env file
| 592 | forbidOnly: !!process.env.CI, |
Access to .env file
| 593 | retries: process.env.CI ? 2 : 0, |
Access to .env file
| 594 | workers: process.env.CI ? 4 : 2, |
Access to .env file
| 598 | process.env.CI ? ['github'] : ['list'], |
Access to .env file
| 601 | baseURL: process.env.BASE_URL ?? 'http://localhost:3000', |
External URL reference
| 241 | Testing login flows that redirect to an external identity provider (Google OAuth, Okta, Auth0, SAML) is a common E2E challenge. Never automate the third-party login UI directly -- it violates the prov |
External URL reference
| 253 | Ephemeral preview environments (Vercel previews, Railway, Heroku review apps) often have HTTP basic auth applied as a blanket security measure to prevent public access. This breaks Playwright/Cypress |
External URL reference
| 601 | baseURL: process.env.BASE_URL ?? 'http://localhost:3000', |