test-local

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Remote Code Execution]: The skill provides instructions for installing Node.js via NVM using a piped bash command (curl ... | bash). This is a security consideration as it downloads and executes a script from a remote repository in a single step. While NVM is a reputable community tool, this pattern bypasses manual inspection of the script before execution.
  • [External Package Installation]: The skill automates the installation of the @microsoft/agentsplayground package from the NPM registry. This involves downloading code from a public registry. Since the skill author is Microsoft and the package belongs to the official Microsoft namespace, this is consistent with official vendor functionality.
  • [System Command Execution]: The skill uses various build and runtime commands such as dotnet build, npm install, and pip install. These are necessary to prepare the local environment for testing the agent but involve running code defined in project-specific configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 03:03 PM