harness-security-bench
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
@metaharness/darwinpackage from the npm registry usingnpx. This is a standard developer workflow for running CLI utilities without permanent installation. - [COMMAND_EXECUTION]: Uses the Bash tool to execute the
metaharness-darwin security benchcommand. It supports various command-line arguments to configure benchmark parameters like population size and execution cycles. - [REMOTE_CODE_EXECUTION]: Uses
npx -yto download and execute the benchmarking tool at runtime. This allows the skill to utilize the specific version of the security harness needed for ADR-155 compliance.
Audit Metadata