bug-reproduction-test-generator
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes code snippets for a
TestIsolationCheckerutility that usessubprocess.run(Python) andexecSync(JavaScript) to execute shell commands for test runners likepytestandjest. These commands are used to verify that reproduction tests are independent and reliably demonstrate the reported bug. - [PROMPT_INJECTION]: The skill defines a workflow where natural-language bug reports are parsed using regular expressions to generate executable code. This pattern creates an indirect prompt injection surface where malicious instructions or code snippets embedded in a bug report could potentially be interpolated into the generated test files if not manually reviewed by the developer.
Audit Metadata