run-testsprite-backend
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
testsprite-clitool via the npm registry. This is an expected operation for the skill's documented purpose and originates from a well-known service. - [COMMAND_EXECUTION]: The skill makes extensive use of the
testspriteCLI to manage test projects, credentials, and execution loops. All command patterns are transparently documented and align with the intended administrative and testing workflows. - [COMMAND_EXECUTION]: The skill executes a bundled static analysis script (
scripts/audit_backend_test.py). Technical review of the script confirms it uses the Pythonastmodule to perform safe, non-executable analysis of code to detect vulnerabilities and does not perform any malicious or unauthorized operations. - [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The skill actively implements measures to prevent accidental exposure of secrets, including instructions for using managed credential storage and an automated auditor to scan test code for literal secrets before they are uploaded.
- [SAFE]: The skill incorporates an internal security auditing tool as a core part of its workflow, demonstrating a high level of security maturity and protective design.
Audit Metadata