finalrun-use-cli
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation of the
@finalrun/finalrun-agentpackage globally vianpm. This package is a core component provided by the vendor and hosted on a standard public repository. - [COMMAND_EXECUTION]: The skill executes a suite of
finalrunCLI commands to interact with local repository files and perform mobile testing tasks. - Core operations such as
finalrun test,finalrun suite, andfinalrun start-serverare designated as requiring user confirmation due to potential resource consumption or background process initiation. - The agent reads local workspace configuration files and test artifacts (such as JSON results, logs, and screenshots) to provide diagnostic feedback, which is the intended behavior for this tool.
- [SAFE]: The skill demonstrates secure secret handling by explicitly advising against automated secret substitution and directing users to manually configure their environment variables or configuration files.
Audit Metadata