runtime-validation

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution for Environment Readiness: The skill performs checks using shell commands like docker info and node --version to determine available capabilities. This is a standard procedure to ensure the environment supports the intended testing tools before proceeding with validation.
  • External Resource Acquisition: It utilizes package managers such as npm and npx to install testing dependencies like Playwright and its associated browser binaries. These operations target well-known, official registries and are necessary for the skill's primary function.
  • Dynamic Test Generation and Execution: To validate application migration, the skill instructs the agent to create new test scripts and execute them using standard runners like mvn test or npm start. This activity is central to the skill's purpose of providing runtime validation evidence.
  • Processing of Legacy Assets: The skill analyzes existing test files from the source project to map user journeys. While this involves processing potentially untrusted data, it is managed within a structured workflow designed to preserve functional parity during the migration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 05:02 PM
Security Audit — agent-trust-hub — runtime-validation