run-ai-qa-tests
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an installation script for the
ai-qa-agent-clifrom the Bitrise official GitHub organization (github.com/bitrise-io/ai-qa-agent-cli). This is a legitimate vendor resource used to provision the local environment. - [COMMAND_EXECUTION]: The skill executes various shell commands and a local helper script (
ensure-template.sh) to interact with the Bitrise platform. These commands include downloading and executing the installer, running the CLI to manage QA sessions, and usingcurlto interface with the Bitrise RDE API. - [CREDENTIALS_UNSAFE]: The script
ensure-template.shreads the Bitrise Personal Access Token (PAT) from the environment variable$BITRISE_PATor the local file~/.bitrise/pat. This is the standard and intended method for authenticating requests to the Bitrise API for this tool. - [REMOTE_CODE_EXECUTION]: The skill utilizes a common installation pattern where a shell script is fetched via
curland piped tosh. While this pattern is often flagged, in this context, the source is the official repository of the skill's vendor (bitrise-io), making it a recognized and safe operation for the tool's deployment.
Audit Metadata