skill-tester

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/script_tester.py utility executes Python scripts found within a target directory to verify their functionality and help output.
  • Evidence: The script uses subprocess.run([sys.executable, str(script_path), ...]) in the _test_script_execution, _test_help_functionality, and _test_sample_data_processing methods.
  • Context: This is the primary purpose of the skill. The implementation avoids shell=True, uses a list of arguments to prevent injection, and enforces a configurable timeout (default 30 seconds) to mitigate potential denial-of-service from infinite loops in tested scripts.
  • [EXTERNAL_DOWNLOADS]: The scripts scripts/skill_validator.py and scripts/quality_scorer.py import the yaml module (typically provided by the PyYAML package).
  • Evidence: import yaml is present in the imports of both files.
  • Context: While the documentation states 'No external dependencies required', the yaml module is not part of the Python standard library. This is a minor documentation discrepancy rather than a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 11:12 AM