kmcp-dev-build-test
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a standard development workflow for a Node.js project, utilizing canonical npm commands such as
npm ciandnpm runfor task execution, which is consistent with the stated purpose of building and testing. - [SAFE]: References to
.envfile management are presented in the context of local environment synchronization between git worktrees, adhering to standard practices for local configuration management without signs of exfiltration. - [SAFE]: The instructions mandate the use of specific, predefined scripts (
npm run dev:deploy,npm run dev:test) and explicitly prohibit direct or arbitrary execution of tools like Jest, which serves as a defensive measure against command injection and unvalidated execution.
Audit Metadata