ae-ltd-mutation-gate
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run shell-based mutation testing tools, including Stryker, mutmut, and PIT, to analyze and modify the project codebase.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to its core workflow: 1. Ingestion points: The agent reads and processes local source code modules and unit tests (documented in SKILL.md). 2. Boundary markers: The instructions lack explicit delimiters or instructions to treat ingested code content as untrusted data. 3. Capability inventory: The agent can execute shell commands and modify test files based on the results of the analysis. 4. Sanitization: No sanitization or validation of the ingested code content is performed, allowing malicious patterns in the code to potentially influence the agent's command execution or test generation.
Audit Metadata