test
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executepytestsuites and perform automated file system checks using standard shell commands likegrep,ls, andtest. These commands are strictly scoped to the plugin's root directory and local configuration paths. - [DYNAMIC_EXECUTION]: The skill performs dynamic execution by running inline Python code via
Bashfor YAML validation and invoking internal Python scripts (e.g.,tools/validate_help_completeness.py,tools/mastering/master_tracks.py) located within the repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data by reading various markdown and configuration files across the repository. While it functions as an ingestion surface, the associated capabilities (validation and reporting) do not present an exfiltration or persistence risk in this context.
Audit Metadata