integration-tests

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Standard Command Execution: The skill is designed to run common development commands such as pnpm install, pnpm build, and pnpm test. These operations are central to the skill's purpose of automating integration testing and are executed within the local repository context.
  • Package Installation: The skill utilizes pnpm i to manage project dependencies. This involves downloading packages from configured registries, which is a routine part of a Node.js development workflow.
  • Local Process Management: It manages a background subprocess for the Verdaccio registry, including startup and cleanup. This indicates the skill is meant to interact with the local environment to facilitate isolated testing.
  • Information Ingestion Consideration: The skill captures output from test execution to provide results to the user. As with any skill that processes external data or logs, there is a minor potential surface for indirect prompt injection if the test output includes instructions intended to influence the agent's behavior, though this is mitigated by standard agent guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 10:35 PM