wendy-cloud-testing
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill clones the pki-core repository from the vendor's GitHub organization. This is used to set up the local PKI infrastructure required for testing.\n- [COMMAND_EXECUTION]: The skill executes various system commands for environment setup and testing, including brew for dependency installation, docker for service management, and pkill for process cleanup. These are standard operations for the described development workflow.\n- [CREDENTIALS_UNSAFE]: The skill contains a hardcoded JWT secret intended for local development environments. It includes an explicit warning that this secret must be changed for production deployments.\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes log files and service outputs to detect errors and verify system health. While processing external data is a potential injection surface, the operations are limited to monitoring and debugging within a local development context.
Audit Metadata