golden-and-snapshot-tests
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a history checker (
scripts/check-golden-changes.mjs) that invokes thegitbinary usingchild_process.spawnSync. This is used to analyze commit messages and diffs to ensure that changes to golden files are accompanied by required metadata trailers. The execution is restricted to the local repository context. - [INDIRECT_PROMPT_INJECTION]: The scripts ingest and parse external data such as git logs and snapshot file content which could technically contain malicious instructions.
- Ingestion points: Repository files (.snap, .snap.ios) and git history logs are read via
fs.readFileSyncandspawnSync. - Boundary markers: The parsing logic relies on strict regex markers (e.g.,
==> commit,exports[...]) to isolate data. - Capability inventory: The skill can read repository files and execute git commands, but does not perform network operations.
- Sanitization: The scripts perform lexical analysis of the text and do not execute the content of snapshots or logs as code.
Audit Metadata