verify-backend-sop-db
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/run_postgres_test.shscript is a wrapper designed to execute arbitrary shell commands provided by the agent, such asgo testor other language-specific test runners. - [DYNAMIC_EXECUTION]: The helper script uses the
"$@"pattern to execute its arguments, providing a direct channel for the agent to perform dynamic command execution based on its instructions. - [INDIRECT_PROMPT_INJECTION]: The skill processes 'backend business SOPs' which may be sourced from external documentation or files. This creates a surface for indirect instructions to influence the agent.
- Ingestion points: Business SOP descriptions and backend service entry point definitions are ingested to establish the test contract.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading the SOP content.
- Capability inventory: The skill allows shell command execution, Docker container management, and file system access within the target project repository.
- Sanitization: No sanitization or validation steps are defined for the SOP data before it is translated into test logic and executed.
- [EXTERNAL_DOWNLOADS]: The skill pulls the official
postgres:16-alpineimage from Docker Hub, a well-known service, to establish the testing environment.
Audit Metadata