slice-closeout

Warn

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/lib/adapter-typescript.mjs dynamically loads the typescript module using createRequire from paths computed at runtime. It searches through local node_modules and .pnpm stores to locate a compatible version. Similarly, scripts/lib/stryker.mjs dynamically resolves and interacts with the vitest binary based on the project's local environment.
  • [COMMAND_EXECUTION]: The skill frequently executes shell commands to perform its tasks. scripts/lib/core.mjs executes git for diffing and history analysis. Most significantly, scripts/lib/stryker.mjs implements a sandboxBuild function that utilizes spawnSync with shell: true to execute project-specific build commands provided via the --build-command argument. This represents a significant attack surface if an agent is directed to operate on a malicious repository containing dangerous build instructions.
  • [EXTERNAL_DOWNLOADS]: The SKILL.md instructions guide the agent to perform a local dependency installation using npm ci --prefix <scripts_directory>. This downloads external packages defined in scripts/package.json, which includes the Stryker mutator core and Vitest runner.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 11, 2026, 06:52 AM