Gen Agent Trust Hub

The skill establishes a QA and evaluation pipeline by installing the third-party 'pixie-qa' package and executing shell scripts to manage the environment. It captures application data (including inputs, outputs, and internal states) and runs a background web server to display results. Security risks include the automated installation of external dependencies from non-trusted repositories and the runtime execution of local project code within a test harness.

The provider classified the analyzed snapshot as MEDIUM risk. This result applies to the content available at audit time.