run-test-cases
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute test commands likepnpm runandvitest. The script builds these commands using list-based arguments, which is a secure practice that prevents shell injection. - [DYNAMIC_EXECUTION]: The execution paths and package filters are resolved at runtime by searching the local file system for repository markers (e.g.,
pnpm-workspace.yaml). The script performs path validation to ensure targets exist before execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of test logs and JSON reports generated by Vitest. It mitigates risk by using a
cleanfunction that removes ANSI escape codes and truncates long messages, preventing potential control character attacks or context overflows.
Audit Metadata