stelow-product-testing-execution
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard test runners such as
npm test,go test, andpytest. These are expected operations for a testing-focused skill. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it processes codebase files during the 'Code Review' phase. Malicious instructions inside reviewed code could theoretically target the agent, but the skill implements a structured decision tree and manual final checklist to mitigate risks. This is a low-risk inherent property of code analysis tools.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and vendor links on GitHub. These references are informative and point to the author's own repositories, consistent with standard development practices.
Audit Metadata