quality-test-implementation
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill clones and processes content from external repositories. It parses build configuration files (e.g.,
pom.xml,pyproject.toml) and executes existing test suites. A malicious repository could contain crafted instructions or scripts designed to exploit the agent's execution environment. - Ingestion points: The skill clones the target repository in
Phase 1and reads various configuration files inPhase 2. - Boundary markers: No explicit boundary markers or instruction-ignoring delimiters are used when processing repository content.
- Capability inventory: The skill executes shell commands, build tools, and test runners across all supported languages.
- Sanitization: There is no evidence of sanitization for the external repository's build scripts or test code before they are executed.
- [COMMAND_EXECUTION]: The skill heavily relies on shell command execution to perform its functions. This includes build tools (
dotnet,mvn,gradlew), test frameworks (pytest), and a local utility script (references/run-coverage.sh). While these are standard development practices, they run in the context of the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of development utilities from official package registries. This includes Global Tools for .NET (
dotnet-reportgenerator-globaltool,coverlet.console) and Python packages (pytest-cov,mypy).
Audit Metadata