testrail
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data which creates a potential injection surface.
- Ingestion points: The skill fetches test case titles, preconditions, steps, and expected results from TestRail via the
testrail_get_casestool (as described inSKILL.md). - Boundary markers: No delimiters or safety instructions are specified to prevent the agent from obeying instructions potentially embedded within the imported TestRail data.
- Capability inventory: The skill has the capability to write new test files and execute shell commands using
npx playwright test(described inSKILL.md). - Sanitization: The instructions do not describe any sanitization or validation of the external content before it is used to generate executable Playwright code.
- [COMMAND_EXECUTION]: The skill executes
npx playwright testto generate test results for processing. While this is the primary purpose of the skill, it represents a shell execution capability triggered by user commands.
Audit Metadata