skill-tester
Warn
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/script_tester.pyscript uses thesubprocess.runmethod to execute Python files discovered within the target skill directory. This execution is performed to verify basic script functionality, help text availability, and sample data processing capabilities. - [REMOTE_CODE_EXECUTION]: By design, the skill performs dynamic testing by running any Python scripts found in the
scripts/folder of the directory it is directed to analyze. This creates a surface for executing arbitrary code if the tool is used on a directory containing untrusted or malicious content.
Audit Metadata