test-run
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform test operations and rungit diff --name-only <base>. The use of a user-provided or auto-detected base reference for the git command is a noted pattern for command execution. - [DYNAMIC_EXECUTION]: The skill dynamically identifies testing frameworks and determines the execution command (e.g.,
npx vitest runorpython -m pytest) at runtime based on the presence of specific project files likepackage.jsonorpyproject.toml. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external documentation files to map tests to functional requirements, which represents an attack surface for indirect instructions.
- Ingestion points:
docs/devdocs/03-test-cases*.mdanddocs/devdocs/04-dev-tasks.md. - Boundary markers: Absent; the skill does not specify markers to delimit documentation content.
- Capability inventory: Access to high-privilege tools including
BashandWrite. - Sanitization: Absent; no explicit sanitization or validation logic is defined for the documentation content processed.
Audit Metadata