healthcare-eval-harness
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several shell commands using
npx jest,jq,mktemp, andbcto execute test suites and process results. These commands are standard for automated testing environments and utilize hardcoded path patterns (e.g.,tests/cdss,tests/security/phi), minimizing the risk of arbitrary command injection. - [EXTERNAL_DOWNLOADS]: The skill references the use of
npx jest, which may involve downloading the Jest package from the official NPM registry if it is not locally available. The provided CI/CD examples also reference official GitHub Actions (actions/checkout,actions/setup-node), which are well-known and trusted resources for software development workflows.
Audit Metadata