run-testsprite-backend

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the testsprite-cli tool via the npm registry. This is an expected operation for the skill's documented purpose and originates from a well-known service.
  • [COMMAND_EXECUTION]: The skill makes extensive use of the testsprite CLI to manage test projects, credentials, and execution loops. All command patterns are transparently documented and align with the intended administrative and testing workflows.
  • [COMMAND_EXECUTION]: The skill executes a bundled static analysis script (scripts/audit_backend_test.py). Technical review of the script confirms it uses the Python ast module to perform safe, non-executable analysis of code to detect vulnerabilities and does not perform any malicious or unauthorized operations.
  • [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The skill actively implements measures to prevent accidental exposure of secrets, including instructions for using managed credential storage and an automated auditor to scan test code for literal secrets before they are uploaded.
  • [SAFE]: The skill incorporates an internal security auditing tool as a core part of its workflow, demonstrating a high level of security maturity and protective design.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 12:27 PM
Security Audit — agent-trust-hub — run-testsprite-backend