test-grab

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [Command Execution]: The skill uses npm and npx to install dependencies and run tests. These are standard commands for JavaScript and TypeScript development environments.
  • [Background Processes]: The development server is started in the background using the environment's capabilities. This is a common pattern for integration tests that require a running server.
  • [Dependency Management]: The skill executes npm run fresh:install, which installs project dependencies. While this involves downloading external packages, it is done through standard package management tools within a specific project context.
  • [Local CLI Tooling]: The skill relies on iwsdk, a command-line interface for the Immersive Web SDK. These commands are used to interact with the local development environment and do not involve unauthorized external communications.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:43 AM
Security Audit — agent-trust-hub — test-grab