eval-generator-gen-pages
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- Automated Command Execution: The skill utilizes
child_process.execSyncandexecFileSyncto orchestrate the execution of generated test scripts and the Vitest framework. This is a common and expected pattern for development tools that automate testing and reporting workflows. - External Document Integration: To synthesize test features from project requirements, the skill can retrieve documents from OneDrive or SharePoint using Microsoft 365 tools. These operations are performed at the user's request to ensure the evaluation suite aligns with specified business logic.
- Dependency Management: The skill automatically configures the local testing environment by managing a
package.jsonfile and runningnpm install. This ensures that necessary development tools, such as testing libraries and TypeScript runners, are correctly installed and versioned. - Static Security Auditing: A core component of the skill is a dedicated security runner that performs static analysis on source code to identify potential risks like OData injection or hardcoded secrets. This proactive auditing is a security-enhancing feature designed to help developers identify and remediate vulnerabilities early in the development lifecycle.
Audit Metadata