allure-agent-mode-feature-delivery
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands, specifically wrapping test runners like
npm testwith theallure agenttool. This is the primary intended functionality for test management and coverage review. - [EXTERNAL_DOWNLOADS]: The instructions suggest using
npx allure agent, which may fetch the Allure package from the official NPM registry if it is not locally available. This is consistent with standard Node.js development workflows and the skill's stated purpose. - [DATA_EXPOSURE]: The skill involves reading generated test artifacts (e.g.,
run.json,findings.jsonl) to assess test coverage and results. These files are restricted to the temporary output directories created during the workflow, and no access to sensitive system configuration or credentials was identified.
Audit Metadata