backend-testing
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate developer instructions for backend testing and adheres to security best practices, such as using environment variables and mocking sensitive services.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface common to code-generation tools as it ingests user-specified frameworks and targets to produce test scripts.\n
- Ingestion points: User-provided configuration for frameworks, tools, and test targets in SKILL.md.\n
- Boundary markers: Presence of explicit security constraints (e.g., 'No production DB', 'No hardcoded secrets').\n
- Capability inventory: Utilization of Bash for dependency management and Write for file creation.\n
- Sanitization: Reliance on instruction-based constraints and model guardrails.\n- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known testing packages from official registries.\n
- Evidence: Use of npm to install jest, supertest, and associated types.
Audit Metadata