test-pruning
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/mutdiff.pyallows for arbitrary command execution by accepting a variable list of trailing command-line arguments that are used as arunnerprefix. This prefix is directly passed tosubprocess.runto execute tests, enabling the substitution of the test runner with any binary or script available in the system path. - [COMMAND_EXECUTION]: Multiple scripts, including
scripts/weakscan.py,scripts/mutdiff.py, andscripts/cov_ctx.sh, execute external system tools such asgit,uv, andpytest. These commands are constructed using parameters like repository paths and git references provided at runtime, which represent a significant capability for local system interaction. - [DYNAMIC_EXECUTION]: The mutation testing tool
scripts/mutdiff.pyprogrammatically modifies Python source and test files at runtime. It uses theastmodule to parse code, injects mutations into the abstract syntax tree, and then unparses and overwrites the original files on the filesystem before executing them.
Audit Metadata