code-backend-tests
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute shell commands as its primary function, specifically
docker ps,docker exec, andvendor/bin/phpunit. - [COMMAND_EXECUTION]: Security risks associated with command execution are significantly mitigated by the skill's mandatory requirement to run all tests inside a Docker container rather than on the host system.
- [COMMAND_EXECUTION]: The skill implements a defensive 'timeout 120' wrapper for all execution commands, which prevents runaway processes and potential denial-of-service scenarios at the local level.
- [COMMAND_EXECUTION]: Host-side execution of the PHPUnit runner is explicitly forbidden in the instructions, reducing the risk of accidental exploitation of the host environment.
Audit Metadata