night-market-validation-and-qa
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various local testing and validation commands including
uv run pytest,make test,python -m pytest, and custom shell scripts likerun-plugin-tests.sh. These commands are standard for development workflows and are confined to the local repository context. - [DATA_EXPOSURE]: The skill references internal configuration files such as
pyproject.toml,.claude/quality_gates.json, and.github/workflows/mutation-testing.ymlto define and verify coverage and quality thresholds. This access is appropriate for the skill's role in enforcing project standards. - [PROMPT_INJECTION]: The skill uses strong instructional language like "Iron Law TDD" and "Constitution rule 3" to define agent behavior. These are internal project guidelines aimed at improving code quality and do not attempt to bypass safety filters or override the agent's core instructions.
- [SAFE]: The skill promotes secure development practices by advocating for "Verifier Integrity," ensuring that the code generator is not the sole judge of its own work, and encouraging independent validation steps.
Audit Metadata