run-test
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several ways to execute shell commands using
pnpmfor testing purposes. These include running all tests, specific test files, and watch mode within theapps/coredirectory. It also demonstrates how to set environment variables likeNODE_OPTIONSfor memory management. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes an
$ARGUMENTSplaceholder to pass user input directly into shell commands (e.g.,pnpm test -- $ARGUMENTS). This identifies a potential attack surface where untrusted data could be used to inject additional shell flags or sub-commands. However, the skill's configuration limits tool access to specificpnpm testpatterns, which acts as a mitigating control.
Audit Metadata