skill-integration-tester

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a static analysis tool for multi-skill workflows. It parses project documentation (CLAUDE.md) and skill manifests (SKILL.md) to ensure correct directory structures and naming conventions.
  • [SAFE]: It validates inter-skill data compatibility by checking JSON schema contracts defined in a local reference file, ensuring that the output of one step correctly feeds into the next.
  • [SAFE]: The implementation relies strictly on the Python standard library. No third-party packages are used, and no network operations (like curl or wget) or remote code executions are performed.
  • [SAFE]: File system activity is restricted to reading project files and writing reports and synthetic test fixtures to a user-defined output directory. No sensitive directories (~/.ssh, etc.) are accessed.
  • [SAFE]: The skill does not contain hardcoded credentials. Mentions of API keys in the code refer to metadata identifying the environment variables required by other skills, not actual secret values.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 01:21 PM
Security Audit — agent-trust-hub — skill-integration-tester