test-run

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform test operations and run git diff --name-only <base>. The use of a user-provided or auto-detected base reference for the git command is a noted pattern for command execution.
  • [DYNAMIC_EXECUTION]: The skill dynamically identifies testing frameworks and determines the execution command (e.g., npx vitest run or python -m pytest) at runtime based on the presence of specific project files like package.json or pyproject.toml.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external documentation files to map tests to functional requirements, which represents an attack surface for indirect instructions.
  • Ingestion points: docs/devdocs/03-test-cases*.md and docs/devdocs/04-dev-tasks.md.
  • Boundary markers: Absent; the skill does not specify markers to delimit documentation content.
  • Capability inventory: Access to high-privilege tools including Bash and Write.
  • Sanitization: Absent; no explicit sanitization or validation logic is defined for the documentation content processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 08:54 AM