The Agent Skills Directory

[SAFE]: The skill is purely informational and functional. It contains documentation for testing principles (Pyramid, AAA, Mocking) in SKILL.md.
[COMMAND_EXECUTION]: The scripts/test_runner.py script executes local test runners (pytest, npm, jest, vitest) using subprocess.run(). This is standard behavior for a testing utility. The implementation is secure as it uses argument lists rather than shell strings and does not enable shell=True, preventing shell injection vulnerabilities.
[DATA_EXPOSURE]: The script reads package.json, pyproject.toml, and requirements.txt to detect the project type. It only accesses standard project metadata and does not touch sensitive files like credentials or SSH keys.
[EXTERNAL_DOWNLOADS]: No external downloads or network operations were detected. While npx is used in the command list, it is invoked on standard, well-known testing frameworks.

testing-patterns