no-mocking-validation-gates
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes and executes a local Bash script (
scripts/scan-for-mocks.sh) to perform automated scans of the project directory. This script utilizes standard system utilities likefind,grep, orripgrepto identify files and code patterns matching forbidden mocking criteria. - [SAFE]: No security threats such as data exfiltration, credential harvesting, or remote code execution were identified. The skill's restrictive behavior regarding test files is a documented policy intended to prevent 'mock drift' and promote functional validation, rather than a malicious attempt to compromise the system.
Audit Metadata