testing-patterns

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/test_runner.py is designed to execute external testing tools such as npm, npx, and pytest. This behavior is legitimate and aligns with the skill's purpose as a test automation utility.
  • [COMMAND_EXECUTION]: Command execution is implemented using subprocess.run with a list of arguments and without the shell=True parameter. This approach follows security best practices by preventing command injection that could arise if untrusted data were parsed as shell commands.
  • [SAFE]: The skill does not perform network operations, access sensitive credentials, or attempt to maintain persistence on the host system. All operations are local and triggered by explicit usage of the provided tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 05:53 PM