test-environment

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill utilizes shell commands through npm and npx iwsdk to manage the lifecycle of a development server and execute testing logic. These operations are scoped to the local workspace defined by the $IWSDK_REPO_ROOT environment variable and are standard for development automation.
  • Dependency Installation: The command npm run fresh:install is used to initialize the project environment. This involves downloading packages from standard registries to ensure the testing environment is correctly configured.
  • Dynamic Data Processing: The agent is instructed to parse JSON output from CLI commands to verify system state (e.g., checking component defaults and system registration). While this introduces a data ingestion surface, the operations are conducted within a controlled local context for testing purposes.
  • Background Process Management: The skill appropriately uses platform-specific parameters (run_in_background: true) to manage the dev server, ensuring the agent can continue monitoring and testing without blocking execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:43 AM
Security Audit — agent-trust-hub — test-environment