backend-testing
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to install testing dependencies and execute test scripts via frameworks such as Jest and Pytest.
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of standard, well-known testing libraries (e.g., jest, supertest, pytest) from official package registries.
- [PROMPT_INJECTION]: The skill processes user-supplied inputs to generate executable test code, creating an attack surface for indirect prompt injection.
- Ingestion points: User-defined parameters for frameworks, test tools, and API targets in SKILL.md.
- Boundary markers: Absent; the skill does not use specific delimiters to isolate user input from the prompt logic.
- Capability inventory: The skill is configured with Write and Bash permissions to create files and run system commands.
- Sanitization: Absent; no explicit validation or escaping of user-provided strings is documented.
Audit Metadata