python-testing
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard Python testing libraries such as pytest, pytest-cov, pytest-asyncio, and pytest-mock. It also provides examples for using well-known CI/CD components, including official GitHub Actions and the Codecov action.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to work with Python source files (**/*.py), which introduces a potential surface for indirect prompt injection if those files contain adversarial instructions. This is an inherent risk for agents performing code analysis tasks.\n
- Ingestion points: Local Python source files matched by the skill's glob pattern.\n
- Boundary markers: No specific boundary markers or instruction-ignoring delimiters are defined in the provided test templates.\n
- Capability inventory: The skill involves reading project files, writing test files, and executing shell commands for test runners like pytest.\n
- Sanitization: The instructions do not define sanitization or filtering logic for the content of the Python files being processed.
Audit Metadata