harness-creator
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
run-benchmark.mjsscript utilizeschild_process.execFileto run its own scaffolding script (create-harness.mjs) within a temporary directory to verify its functionality. - [COMMAND_EXECUTION]: The skill generates a shell script (
init.sh) and usesfs.chmodto make it executable. This script is intended to provide a standard entry point for agents to verify the project environment. - [COMMAND_EXECUTION]: The
create-harness.mjsscript accepts a--commandsargument that allows users or agents to specify custom verification steps, which are then written directly into the generatedinit.shfile. - [COMMAND_EXECUTION]: The generated
init.shtemplate includes logic to detect the project's package manager and execute standard commands likenpm installandnpm testbased on the detected environment.
Audit Metadata