Skills
Navigate
skills/testomatio/skills/qa-test-code-coverage/Gen Agent Trust Hub

qa-test-code-coverage

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands such as grep to extract test identifiers from project files and git clone to retrieve automated test suites into a cache directory.
  • [EXTERNAL_DOWNLOADS]: The skill downloads external content by cloning user-provided repositories and pulling manual test cases via vendor-provided CLI tools.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx to execute utilities from the npm registry, including check-tests and @testomatio/reporter, which are official tools provided by the skill author.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (manual markdown tests and automated test files) to extract identifiers. It uses specific regex-based grep patterns and delimiters to minimize the risk of executing embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:02 AM