code-testing-extensions
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [SAFE]: The skill is a reference-only catalog containing documentation and guidance for code-testing pipelines. It contains no executable scripts and is configured with 'disable-model-invocation: true' to prevent direct execution by the model.
- [COMMAND_EXECUTION]: The extension files document standard industry commands for building and testing codebases. These include
cmake,ctest,dotnet build,go test,mvn test,gradlew test,npm test,pytest,rspec, andcargo test. These commands are part of the intended purpose to provide guidance for testing workflows. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading established testing frameworks from trusted and well-known repositories. For example,
extensions/cpp.mdincludes instructions for using CMake'sFetchContentto download GoogleTest fromgithub.com/google/googletestand Catch2 fromgithub.com/catchorg/Catch2. These downloads target official, well-known developer resources. - [PRIVILEGE_ESCALATION]: The C++ extension (
extensions/cpp.md) mentionssudo apt-get installas a last-resort method for installing system dependencies on Linux. This is documented as a standard administrative step for environment setup in developer workflows.
Audit Metadata