aureuserp-test-case-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and interprets plugin source code (including routes, controllers, and validation rules) to construct test cases, presenting a surface for indirect prompt injection if the ingested files contain malicious instructions.
- Ingestion points: The workflow involves reading route files, controller actions, validation rules, and policy permission names as described in
references/api.md. - Boundary markers: Instructions do not define specific delimiters or guardrails to prevent the agent from executing instructions found within the source code being analyzed.
- Capability inventory: The skill involves writing new test files and suggesting refactors to existing application code.
- Sanitization: No sanitization or filtering logic is specified for the data read from the plugin files.
Audit Metadata