test-organize-layers

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the Python standard library (ast, pathlib, subprocess) to perform local development tasks. No suspicious imports or external dependencies are required.
  • [COMMAND_EXECUTION]: The master script organize_tests.py uses subprocess.run to orchestrate its sibling scripts (validate_test_placement.py, analyze_test_pyramid.py, and move_test.py). This is a legitimate use of command execution for local orchestration and does not present a shell injection risk as it uses absolute paths to its own scripts via sys.executable.
  • [SAFE]: No network calls, data exfiltration patterns, or external downloads were identified. The scripts interact only with the local filesystem, specifically targeting the project's test directory.
  • [SAFE]: File modifications (moving tests and updating imports) are performed using pathlib and regex replacements. These actions are consistent with the skill's stated purpose of refactoring test structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 05:24 PM