bats-testing-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation procedures for the bats-core framework from its official GitHub repository and via the npm registry. These are standard and safe methods for setting up the software.
  • [COMMAND_EXECUTION]: The skill contains various shell command examples for file operations (mktemp, rm, touch) and permission management (chmod) within a testing context. These actions are appropriate for the skill's purpose.
  • [DYNAMIC_EXECUTION]: The skill demonstrates how to create command stubs by dynamically writing shell scripts to a temporary directory for mocking purposes, which is a common and safe pattern in unit testing shell scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill addresses testing for shell scripts that process command-line arguments and environment variables. 1. Ingestion points: Command-line arguments and environment variables passed to tested scripts in SKILL.md. 2. Boundary markers: None explicitly defined in the provided patterns. 3. Capability inventory: File system operations and shell command execution via the run helper in Bats tests. 4. Sanitization: The skill documents how to test various inputs to facilitate discovery of edge cases in the scripts being tested.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 06:53 AM
Security Audit — agent-trust-hub — bats-testing-patterns