qa-test-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted test code provided by users, which serves as a potential ingestion point for indirect prompt injection attacks.
- Ingestion points: Test file content or file paths provided by the user for review.
- Boundary markers: The skill does not explicitly define delimiters to isolate the untrusted code content from its internal instructions.
- Capability inventory: The skill is scoped to read files, perform analysis, and write review reports to a designated output directory; it explicitly disclaims the ability to modify production code or execute tests.
- Sanitization: No specific sanitization or validation of the input test code is mentioned in the workflow.
Audit Metadata