test-grab
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill relies on the execution of shell commands through the
iwsdkCLI andnpmto perform testing operations. This is a core part of its intended functionality for automated testing within a development workspace. - External Dependency Management: The skill uses
npm run fresh:installto set up the environment andnpx iwsdkto execute tool commands. These operations download and install packages from the registry, which is a standard practice for managing Node.js-based development tools. - Indirect Prompt Injection Surface: The agent is instructed to parse JSON output from tool calls (e.g.,
npx iwsdk ecs query) to verify assertions. While this involves processing external data, the data originates from the local development environment and tools being tested, following a common pattern for automated quality assurance.
Audit Metadata