supertest-nestjs
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The file auth-testing.md contains hardcoded mock credentials, including a password ('SecurePass123!') and a test API key ('sk_test_1234567890abcdef'), used in educational code examples.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates processing untrusted data from API responses and file uploads, presenting an indirect prompt injection surface. Ingestion points: Data enters the agent context via 'res.body' in several test files and via '.attach()' in advanced-patterns.md. Boundary markers: No explicit instructions are provided to the agent to treat response content as untrusted or to ignore embedded instructions. Capability inventory: The skill uses supertest for local network requests and path for file system access to fixtures. Sanitization: Content is validated using standard assertions but lacks specific filtering for malicious instruction strings within the ingested data.
Audit Metadata