eval-generator-code-app

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Automated Code Generation and Execution: The skill is designed to generate TypeScript scripts and execute them using the tsx runner to perform automated evaluations. This includes running a security analyzer that utilizes execSync to perform audits. This behavior is standard for development-oriented tools and is used to provide automated feedback on code health.
  • External Dependency Management: To support the testing environment, the skill modifies the project's package.json to include well-known development tools like Vitest and glob, followed by an npm install command. These dependencies are standard in the JavaScript ecosystem and are necessary for the execution of the generated unit tests.
  • Requirements-Based Manifest Generation: The skill can ingest requirements from external documents (BRDs) via local files or OneDrive to define the feature set for evaluation. This allows the generated tests to be grounded in the intended project requirements, ensuring that the automated checks align with the user's goals.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 05:39 AM
Security Audit — agent-trust-hub — eval-generator-code-app