ns-unit-testing
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains technical instructions and troubleshooting steps for developers. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [DATA_EXFILTRATION]: No sensitive file paths (such as SSH keys or AWS credentials) or hardcoded secrets are accessed. The networking mentioned involves a WebSocket bridge to local addresses (127.0.0.1, 10.0.2.2) for communication between the test runner and the mobile device/emulator, which is standard for this tool's purpose.
- [REMOTE_CODE_EXECUTION]: The skill describes the execution of standard CLI commands like
ns testandnpx vitest. These are expected operations for a developer tool. No suspicious remote script downloads or piped execution from untrusted sources are present. - [EXTERNAL_DOWNLOADS]: The skill references standard packages from the official npm registry (
vitest,@nativescript/unit-test-runner, etc.). These are well-known or vendor-specific resources appropriate for the skill's context. - [OBFUSCATION]: No obfuscated content, encoded strings (Base64/Hex), or hidden characters were detected in the instructions or code snippets.
- [DYNAMIC_EXECUTION]: The use of
require.contextfor spec discovery is a standard Webpack/Vite pattern for bundling tests and does not constitute unsafe dynamic execution in this context.
Audit Metadata