api-test-suite-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands (
find,grep,sed,sort) to scan local source files and identify API route definitions. These commands are localized to the user's project directory and are routine for static analysis of codebases. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill focuses on generating local test files based on the scanned project structure.
- [DATA_EXFILTRATION]: No network operations or data exfiltration attempts were found. All identified logic is dedicated to local testing and analysis.
- [CREDENTIALS_UNSAFE]: The skill uses placeholder values for testing (e.g.,
test-secret,Bearer not-a-real-jwt) and correctly advises users to use test configurations rather than production secrets.
Audit Metadata