test

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute pytest suites and perform automated file system checks using standard shell commands like grep, ls, and test. These commands are strictly scoped to the plugin's root directory and local configuration paths.
  • [DYNAMIC_EXECUTION]: The skill performs dynamic execution by running inline Python code via Bash for YAML validation and invoking internal Python scripts (e.g., tools/validate_help_completeness.py, tools/mastering/master_tracks.py) located within the repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data by reading various markdown and configuration files across the repository. While it functions as an ingestion surface, the associated capabilities (validation and reporting) do not present an exfiltration or persistence risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:13 AM