fix-test-cli-ci
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several npm run commands to build the insomnia-inso package, start a test server, and execute test suites. These are standard development operations within the Insomnia repository.
- [EXTERNAL_DOWNLOADS]: The skill suggests running npm run install-libcurl-node and npm run install-libcurl-electron to manage native dependencies. These scripts are project-internal and facilitate the download of binaries required for the application's functionality.
- [PROMPT_INJECTION]: The skill processes untrusted input in the form of CI logs and workflow URLs. 1. Ingestion points: User-provided failure logs and GitHub workflow links in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Shell command execution via npm scripts. 4. Sanitization: None. Note: While this ingestion surface exists, the instructions guide the agent toward safe, predefined development commands.
Audit Metadata