e2e-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: A hardcoded dummy password ('Test123!@#') is present in a code example within
resources/implementation-playbook.mdused for demonstrating test user fixtures.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of tests that interact with external web applications, creating a surface for indirect prompt injection from application content.\n - Ingestion points: The agent processes UI elements and data from target applications during test implementation and execution.\n
- Boundary markers: The provided templates do not include specific delimiters or instructions to ignore potential commands embedded in application data.\n
- Capability inventory: The skill leverages browser automation, network request manipulation, and file system access for storing test artifacts.\n
- Sanitization: No sanitization logic for data retrieved from external sources is included in the provided code patterns.
Audit Metadata