Skills
Navigate
skills/tomevault-io/skills-registry/unit-testing-test-generate/Gen Agent Trust Hub

unit-testing-test-generate

Warn

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The CoverageAnalyzer class in SKILL.md uses the subprocess.run method to execute a string variable named test_command. This pattern allows the execution of arbitrary shell commands on the host system if the command input is sourced from untrusted data or is not properly sanitized.
  • [DATA_EXPOSURE]: The skill's TestGenerator class utilizes open(file_path) to read local files for analysis. While this is consistent with the skill's stated purpose of generating tests for existing code, it establishes a capability for the agent to access and process the contents of the local file system.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 01:19 AM
Security Audit — agent-trust-hub — unit-testing-test-generate