switchyard-testing-ci

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard developer utilities such as uv, ruff, mypy, pytest, and cargo to perform code linting, type checking, and test automation as part of CI validation workflows.
  • [DATA_EXFILTRATION]: Promotes secure credential handling by explicitly unsetting sensitive environment variables (e.g., OPENROUTER_API_KEY, NVIDIA_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY) during local testing to prevent accidental data transmission to third-party AI providers.
  • [PROMPT_INJECTION]: Operates on local repository contents and Git diffs to dynamically select test suites, representing a standard attack surface for indirect prompt injection common in testing tools.
  • [REMOTE_CODE_EXECUTION]: Utilizes inline Python scripts and dynamic loading through SourceFileLoader to automate repository maintenance tasks like YAML frontmatter validation and license header verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 07:48 AM
Security Audit — agent-trust-hub — switchyard-testing-ci