hyperexecute-skill
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the official HyperExecute CLI binary (
./hyperexecute) and several local Node.js utility scripts (scripts/doctor.js,scripts/validate-config.js,scripts/build-command.js,scripts/summarize-artifacts.js) to automate test orchestration and project analysis. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the HyperExecute CLI tool. As the source is identified as LambdaTest, a well-known service, this is a legitimate operational requirement for the skill's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by analyzing project code, test outputs, and log files to generate configuration and troubleshoot failures. While this is an inherent attack surface, the skill implements mitigation measures such as linting and CLI-based validation steps.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by strictly instructing the use of environment variables (
LT_USERNAME,LT_ACCESS_KEY) and specifically warning against hardcoding secrets in YAML files or documentation.
Audit Metadata