devassure
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The DevAssure CLI allows users to define custom tools in
.devassure/tools/index.yamlthat execute shell commands via anexecfield. This feature supports argument substitution and setup steps likenpm install, which is intended for extending testing capabilities.- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the@devassure/clipackage from the public NPM registry. It also specifies communication with several vendor-owned endpoints for authentication and processing, includingapp.devassure.ioand a Heroku-hosted service (devassure-llm-2e2fa73b953b.herokuapp.com).- [DATA_EXFILTRATION]: The skill documents the management of authentication tokens for CI/CD environments and the storage of application credentials intest_data.yaml. While these involve sensitive data, the practices described follow standard configuration patterns for automated testing tools.
Audit Metadata