run-tests
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via
pnpmto build project dependencies and run test suites using Vitest. These actions are standard for the skill's primary purpose of software verification. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill implements security best practices by using
infisicalfor secret management. It includes explicit instructions to use the--silentflag and never print or echo secret values to the console. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external test specification files (
.test.ts). This is an inherent attack surface for any test-running utility, but the instructions are focused on standard project testing workflows. - Ingestion points: Test files located in the
specs/directory (SKILL.md). - Boundary markers: None explicitly defined for file content.
- Capability inventory: Command execution via
pnpmandvitest(SKILL.md). - Sanitization: Relies on the standard execution environment of the Vitest runner.
Audit Metadata