test-pruning

Warn

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/mutdiff.py allows for arbitrary command execution by accepting a variable list of trailing command-line arguments that are used as a runner prefix. This prefix is directly passed to subprocess.run to execute tests, enabling the substitution of the test runner with any binary or script available in the system path.
  • [COMMAND_EXECUTION]: Multiple scripts, including scripts/weakscan.py, scripts/mutdiff.py, and scripts/cov_ctx.sh, execute external system tools such as git, uv, and pytest. These commands are constructed using parameters like repository paths and git references provided at runtime, which represent a significant capability for local system interaction.
  • [DYNAMIC_EXECUTION]: The mutation testing tool scripts/mutdiff.py programmatically modifies Python source and test files at runtime. It uses the ast module to parse code, injects mutations into the abstract syntax tree, and then unparses and overwrites the original files on the filesystem before executing them.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 29, 2026, 08:16 PM