night-market-validation-and-qa

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for running project-specific testing tools, including pytest, make, uv, and mutmut. These commands are used to validate code and enforce coverage thresholds, which is the primary purpose of the skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and cite the captured output of local commands as evidence for completion claims. \n
  • Ingestion points: Captured command output referenced in SKILL.md (Evidence Bar section).\n
  • Boundary markers: The skill mandates numbered labels for evidence (e.g., [E1], [E2]).\n
  • Capability inventory: Execution of pytest, make, uv, rg, and git commands as described in SKILL.md.\n
  • Sanitization: None specified; the skill relies on strict reporting formats to maintain integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:49 PM