slop-test-detector
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill performs static analysis of provided source code using regular expressions and a custom lexer to identify test quality issues.\n- [COMMAND_EXECUTION]: The skill does not execute system commands or spawn subprocesses. All logic is implemented using Node.js built-in functions for string manipulation and does not involve the execution of the analyzed code.\n- [EXTERNAL_DOWNLOADS]: No external dependencies, packages, or remote scripts are referenced or downloaded. The skill relies exclusively on Node.js core modules such as node:fs and node:path for internal testing and node:test for the test suite.\n- [DATA_EXFILTRATION]: No network operations (HTTP/HTTPS, sockets) are present in the code. Analysis is performed locally and results are returned to the caller as structured data.\n- [PROMPT_INJECTION]: The skill's documentation and instructions do not contain patterns intended to override agent behavior or bypass safety constraints. The use of 'Defect' comments is a structural convention for the analysis tool and not an injection attempt.
Audit Metadata