e2e-testing
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves a legitimate purpose for development and quality assurance of the Qwen Code CLI. The scripts and instructions provided are transparent and consistent with the stated goals.
- [COMMAND_EXECUTION]: The documentation in
SKILL.mdandreferences/mcp-testing.mdprovides examples of shell commands for building the project (npm run build), running the CLI in various modes, and managing tmux sessions. These are standard development workflows and do not involve unauthorized command execution. - [DATA_EXPOSURE]: The script
scripts/token-stats.pyreads from the local~/.qwen/logsdirectory to calculate token usage. This data is processed locally and displayed to the user in the terminal, representing normal application logging analysis without any external data exfiltration. - [REMOTE_CODE_EXECUTION]: No patterns of downloading and executing remote code were detected. All scripts included in the skill are intended for local execution within the development environment.
Audit Metadata