Skills
skills/teamily-ai/skill-creator/webapp-testing/Gen Agent Trust Hub

webapp-testing

Warn

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/with_server.py uses subprocess.Popen with shell=True to execute commands provided via the --server argument. This allows for the execution of arbitrary shell commands, including those with command chaining (e.g., &&, ;, |).
  • [COMMAND_EXECUTION]: The scripts/with_server.py script also executes a user-provided command after starting the servers using subprocess.run(args.command), which can lead to arbitrary code execution if the command list is manipulated.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 1, 2026, 01:33 AM