manual-coverage
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized operations were detected. The skill adheres to the principle of least privilege by explicitly restricting modifications to non-source files and minimizing script execution to essential validation tasks.
- [COMMAND_EXECUTION]: The skill uses shell commands like
grepandnpxto extract test identifiers and run reporting tools. These operations are scoped to identified test documentation and the produced configuration file, representing standard developer workflows. - [EXTERNAL_DOWNLOADS]: Dependencies are managed via
npxand include standard utilities likejs-yamland official tools from the skill's author (@testomatio/reporter,check-tests). These resources are verified against the vendor's context and are necessary for the skill's primary function of integrating with the Testomat.io platform.
Audit Metadata