Skills
Navigate
skills/zakariaf/reactnative-skills/debug-menu-and-test-hooks/Gen Agent Trust Hub

debug-menu-and-test-hooks

Warn

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command syntax in SKILL.md (Workflow step 9) to execute node ${CLAUDE_SKILL_DIR}/scripts/check-test-hooks.mjs . when the skill is accessed. This script performs an automated audit of the host project's test-only infrastructure.
  • [DYNAMIC_EXECUTION]: The checker implementation in scripts/check-test-hooks.mjs and its helper scripts/lib/app-modules.mjs uses Node.js module.registerHooks and dynamic import() to load and execute the project's own TypeScript source code. This is used to run behavior probes against the app's internal logic, such as clock and connectivity simulations.
  • [COMMAND_EXECUTION]: The skill's utility library scripts/check-lib.mjs provides functions to spawn child processes using child_process.spawnSync and perform extensive filesystem operations, including writing, deleting, and renaming files. These are primarily utilized by the skill's self-test suite and repository scanning logic.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 18, 2026, 11:32 AM