testing-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/test_runner.pyis designed to execute external testing tools such asnpm,npx, andpytest. This behavior is legitimate and aligns with the skill's purpose as a test automation utility. - [COMMAND_EXECUTION]: Command execution is implemented using
subprocess.runwith a list of arguments and without theshell=Trueparameter. This approach follows security best practices by preventing command injection that could arise if untrusted data were parsed as shell commands. - [SAFE]: The skill does not perform network operations, access sensitive credentials, or attempt to maintain persistence on the host system. All operations are local and triggered by explicit usage of the provided tools.
Audit Metadata