bagisto-pest-testing
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the agent with instructions to run various local commands necessary for development and testing. These include running the test runner (
vendor/bin/pest), updating class maps (composer dump-autoload), and performing environment maintenance viaphp artisan tinker. The commands are specific to the Bagisto/Laravel environment and are used for their intended functional purposes. - [INDIRECT_PROMPT_INJECTION]: The skill operates on workspace code, which is a potential ingestion point for instructions if the codebase contains untrusted contributions. However, the skill actively promotes security best practices by recommending architecture tests to identify and prevent the inclusion of debugging functions (
dd,dump,ray) in the application code. - Ingestion points: Local project workspace (specifically files within
packages/Webkul/andtests/). - Boundary markers: The skill enforces strict file layouts and naming conventions for tests but does not explicitly define prompt delimiters for external data.
- Capability inventory: Shell command execution capabilities are present via the Pest CLI and PHP Artisan.
- Sanitization: The skill provides templates for Pest architecture tests to scan for and block debugging commands in sensitive directories like Controllers and Models.
Audit Metadata