test-ui
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Local Command Execution: The skill executes several shell commands using
npmand theiwsdkCLI (vianpx). These commands are used to install dependencies, manage a development server, and query the status of the UI system. This is standard behavior for a test automation skill operating within a local development repository. - External Dependency Management: The skill utilizes
npm run fresh:installto set up the environment. This involves fetching and installing Node.js packages as defined in the project's configuration. This is a common and expected practice for initializing testing environments. - Indirect Prompt Injection Surface: The agent is instructed to parse JSON output from CLI commands (e.g.,
npx iwsdk ecs find) to verify test assertions. While processing external data is a common attack surface, the risk here is minimal because the data originates from a controlled, local development example environment. - Temporary File Access: The skill captures screenshots during the testing process and stores them in the
/tmpdirectory. This is a routine operation in automated UI testing to provide visual verification of the system's state.
Audit Metadata