hook-test-kit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a test script that executes a user-specified hook script using the
bashinterpreter to verify its behavior against defined test cases. - [PRIVILEGE_ESCALATION]: The
scaffold.shscript modifies file permissions by applyingchmod +xto both the target hook script and the newly created test script to ensure they are executable. - [DYNAMIC_EXECUTION]: The skill uses a template (heredoc) to dynamically generate a bash script (
test_*.sh) at runtime based on input parameters. - [INDIRECT_PROMPT_INJECTION]: The skill accepts external file paths as input to generate executable code. It mitigates potential side effects by instructing the use of temporary scratch directories (
mktemp -d) for test execution, isolating the tests from the user's primary filesystem.
Audit Metadata