codeceptjs-run-analysis
Pass
Audited by Gen Agent Trust Hub on May 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for the legitimate purpose of analyzing local test artifacts produced during CodeceptJS test runs. It uses standard bash tools for data extraction and diagnostic purposes within the project environment.
- [PROMPT_INJECTION]: The skill analyzes external data (HTML snapshots and ARIA dumps from the application under test) which represents a surface for indirect prompt injection if the tested application is compromised. However, this behavior is essential to the skill's primary function.
- Ingestion points: HTML, ARIA, and console log files located within
output/trace_*directories. - Boundary markers: Absent; the skill does not specify the use of delimiters when reading or processing the artifact content.
- Capability inventory: Access to system shell utilities including
ls,grep,jq,sort, anduniqto process the artifacts. - Sanitization: No explicit sanitization steps are provided for the content of the analyzed artifacts.
Audit Metadata