skills/dmoka/skills/legacy-testing/Gen Agent Trust Hub

legacy-testing

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a bash script (scripts/assess.sh) to perform static analysis of the local repository. The script is designed to be read-only, using standard tools like find, grep, sed, and awk to identify the project's tech stack, test coverage, and external dependencies. This is a legitimate utility for the skill's stated purpose of assessing code for testing.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves the agent reading and interpreting source code, existing tests, and command outputs from the local environment. This creates a surface where adversarial code or comments in the analyzed project could potentially influence the agent's logic, which is a standard risk for developer-focused tools.
  • [EXTERNAL_DOWNLOADS]: The documentation and playbooks within the skill reference numerous external resources, such as official documentation for Vitest, Jest, Stryker, and various property testing libraries. All referenced URLs point to reputable developer tools and well-known services.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 11:21 AM