skill-tester

Warn

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/script_tester.py script uses the subprocess.run method to execute Python files discovered within the target skill directory. This execution is performed to verify basic script functionality, help text availability, and sample data processing capabilities.
  • [REMOTE_CODE_EXECUTION]: By design, the skill performs dynamic testing by running any Python scripts found in the scripts/ folder of the directory it is directed to analyze. This creates a surface for executing arbitrary code if the tool is used on a directory containing untrusted or malicious content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 08:16 AM
Security Audit — agent-trust-hub — skill-tester