configure-tests

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command syntax in the 'Context' section to gather project information (e.g., !find . -maxdepth 1 -name 'package.json'). These commands are benign, intended for environmental discovery, and do not involve unsanitized user input.
  • [COMMAND_EXECUTION]: The skill executes various shell commands via the Bash tool to detect frameworks, read configurations, and apply fixes (e.g., grep, find, npm install). These are consistent with the skill's primary purpose of infrastructure configuration.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install packages from official registries (NPM, PyPI, Cargo) and refers to well-known documentation and repository sites (Vitest, Jest, pytest, GitHub) to verify current versions. These sources are reputable and aligned with standard developer workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:51 PM