code-testing-extensions

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [SAFE]: The skill is a reference-only catalog containing documentation and guidance for code-testing pipelines. It contains no executable scripts and is configured with 'disable-model-invocation: true' to prevent direct execution by the model.
  • [COMMAND_EXECUTION]: The extension files document standard industry commands for building and testing codebases. These include cmake, ctest, dotnet build, go test, mvn test, gradlew test, npm test, pytest, rspec, and cargo test. These commands are part of the intended purpose to provide guidance for testing workflows.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading established testing frameworks from trusted and well-known repositories. For example, extensions/cpp.md includes instructions for using CMake's FetchContent to download GoogleTest from github.com/google/googletest and Catch2 from github.com/catchorg/Catch2. These downloads target official, well-known developer resources.
  • [PRIVILEGE_ESCALATION]: The C++ extension (extensions/cpp.md) mentions sudo apt-get install as a last-resort method for installing system dependencies on Linux. This is documented as a standard administrative step for environment setup in developer workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:11 AM