qa-rest-assured-writer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core workflow involves reading and processing external documents like OpenAPI specifications, API contracts, and test designs to generate executable code. This ingestion of potentially untrusted data represents an attack surface for indirect prompt injection.
- Ingestion points: The workflow in
SKILL.mdreads test cases, API contracts, and OpenAPI specifications. - Boundary markers: The instructions lack specific delimiters or instructions for the agent to ignore potentially malicious embedded prompts within these external files.
- Capability inventory: The skill has the capability to write Java files to the file system in the
tests/apidirectory. - Sanitization: There is no evidence of sanitization or validation logic to verify the content of the ingested specifications before code generation.
Audit Metadata