testrail

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data which creates a potential injection surface.
  • Ingestion points: The skill fetches test case titles, preconditions, steps, and expected results from TestRail via the testrail_get_cases tool (as described in SKILL.md).
  • Boundary markers: No delimiters or safety instructions are specified to prevent the agent from obeying instructions potentially embedded within the imported TestRail data.
  • Capability inventory: The skill has the capability to write new test files and execute shell commands using npx playwright test (described in SKILL.md).
  • Sanitization: The instructions do not describe any sanitization or validation of the external content before it is used to generate executable Playwright code.
  • [COMMAND_EXECUTION]: The skill executes npx playwright test to generate test results for processing. While this is the primary purpose of the skill, it represents a shell execution capability triggered by user commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 11:54 AM