qa-test-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a standard documentation generator that follows established software testing best practices. It does not perform any network operations, access sensitive system files, or execute external code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface area for indirect prompt injection by ingesting project-specific context to populate test strategy templates.
- Ingestion points: Project context input (scope, tech stack, etc.) as defined in the SKILL.md workflow.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the provided project context.
- Capability inventory: Capabilities are limited to generating files in the
docs/plansdirectory and referencing/invoking other QA-related skills (qa-diagram-generator, qa-plan-creator). - Sanitization: No explicit input sanitization or validation logic is defined in the provided files.
Audit Metadata