test-ui

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Local Command Execution: The skill executes several shell commands using npm and the iwsdk CLI (via npx). These commands are used to install dependencies, manage a development server, and query the status of the UI system. This is standard behavior for a test automation skill operating within a local development repository.
  • External Dependency Management: The skill utilizes npm run fresh:install to set up the environment. This involves fetching and installing Node.js packages as defined in the project's configuration. This is a common and expected practice for initializing testing environments.
  • Indirect Prompt Injection Surface: The agent is instructed to parse JSON output from CLI commands (e.g., npx iwsdk ecs find) to verify test assertions. While processing external data is a common attack surface, the risk here is minimal because the data originates from a controlled, local development example environment.
  • Temporary File Access: The skill captures screenshots during the testing process and stores them in the /tmp directory. This is a routine operation in automated UI testing to provide visual verification of the system's state.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:29 PM