test-grab

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill relies on the execution of shell commands through the iwsdk CLI and npm to perform testing operations. This is a core part of its intended functionality for automated testing within a development workspace.
  • External Dependency Management: The skill uses npm run fresh:install to set up the environment and npx iwsdk to execute tool commands. These operations download and install packages from the registry, which is a standard practice for managing Node.js-based development tools.
  • Indirect Prompt Injection Surface: The agent is instructed to parse JSON output from tool calls (e.g., npx iwsdk ecs query) to verify assertions. While this involves processing external data, the data originates from the local development environment and tools being tested, following a common pattern for automated quality assurance.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:29 PM