eval-generator-gen-pages

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • Automated Command Execution: The skill utilizes child_process.execSync and execFileSync to orchestrate the execution of generated test scripts and the Vitest framework. This is a common and expected pattern for development tools that automate testing and reporting workflows.
  • External Document Integration: To synthesize test features from project requirements, the skill can retrieve documents from OneDrive or SharePoint using Microsoft 365 tools. These operations are performed at the user's request to ensure the evaluation suite aligns with specified business logic.
  • Dependency Management: The skill automatically configures the local testing environment by managing a package.json file and running npm install. This ensures that necessary development tools, such as testing libraries and TypeScript runners, are correctly installed and versioned.
  • Static Security Auditing: A core component of the skill is a dedicated security runner that performs static analysis on source code to identify potential risks like OData injection or hardcoded secrets. This proactive auditing is a security-enhancing feature designed to help developers identify and remediate vulnerabilities early in the development lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 05:39 AM
Security Audit — agent-trust-hub — eval-generator-gen-pages