python
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands for development workflows, such as
pytest,unittest,ruff, andblackfor code quality and testing inSKILL.md. - [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it is designed to review and test external code.
- Ingestion points: User-provided Python source code and test files are processed by the agent.
- Boundary markers: No delimiters or instructions are used to separate the analyzed data from the agent's primary instructions.
- Capability inventory: The skill utilizes
pytestandunittestinSKILL.md, which involve executing the code being analyzed. - Sanitization: No input validation or sanitization of the code files is performed prior to execution.
Audit Metadata