test-level

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill utilizes shell commands to interact with a development environment and the project's specific CLI. These commands are focused on workflow automation, such as starting servers (npm run dev) and querying entity-component system (ECS) data.
  • External Package Management: The skill uses npm and npx to install dependencies and execute tools. These are standard, well-known services for Node.js development, and the operations are performed within the local project workspace.
  • Data Ingestion for Testing: The skill is designed to parse JSON output from tool calls to verify assertions about the scene hierarchy and component states. This represents a functional surface for automated testing rather than a security risk, as the data is generated by local development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 10:43 AM
Security Audit — agent-trust-hub — test-level