switchyard-testing-ci
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard developer utilities such as
uv,ruff,mypy,pytest, andcargoto perform code linting, type checking, and test automation as part of CI validation workflows. - [DATA_EXFILTRATION]: Promotes secure credential handling by explicitly unsetting sensitive environment variables (e.g.,
OPENROUTER_API_KEY,NVIDIA_API_KEY,OPENAI_API_KEY,ANTHROPIC_API_KEY) during local testing to prevent accidental data transmission to third-party AI providers. - [PROMPT_INJECTION]: Operates on local repository contents and Git diffs to dynamically select test suites, representing a standard attack surface for indirect prompt injection common in testing tools.
- [REMOTE_CODE_EXECUTION]: Utilizes inline Python scripts and dynamic loading through
SourceFileLoaderto automate repository maintenance tasks like YAML frontmatter validation and license header verification.
Audit Metadata