run-tests-with-testomatio-reporter
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands provided by the agent or user via the
runcommand of the reporter CLI. It also utilizesgit diffto identify changes in the repository for filtered test execution. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@testomatio/reporterpackage from the NPM registry. This package is an official tool belonging to the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources to filter tests, including a coverage map file and the output of git commands.
- Ingestion points: Reads the
coverage.tests.yml(coverage map) file and processes output fromgit diff --name-only. - Boundary markers: No specific delimiters or instructions to ignore embedded content within these data sources are defined.
- Capability inventory: The skill can execute shell commands, perform file system reads, and interact with external APIs (Testomat.io, GitHub, GitLab, Bitbucket).
- Sanitization: No explicit validation or sanitization of the content within the coverage map or git output is described.
Audit Metadata