integration-test-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill instructions and provided code snippets follow standard development practices for integration testing and do not contain malicious patterns.\n- [COMMAND_EXECUTION]: The skill includes code that uses child_process.execSync to execute npx prisma migrate deploy. This is a standard command for applying database migrations in a test environment and does not involve untrusted input.\n- [DYNAMIC_EXECUTION]: The provided test harness uses prisma.$executeRawUnsafe to truncate database tables. The table names are retrieved from the database's own pg_tables metadata, which is a common pattern for resetting test state.\n- [CREDENTIALS_UNSAFE]: Example configuration for GitHub Actions uses placeholder credentials (test/test) for a test database service, which is standard practice for CI environments.
Audit Metadata