stelow-workflow-testing-ai-code
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a workflow template for planning software testing strategies based on project specifications.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data from 'spec-product.md' to determine testing depth, which constitutes an attack surface. However, the logic is purely for planning and does not execute untrusted commands.
- [EXTERNAL_DOWNLOADS]: The documentation references well-known testing tools such as Vitest, Stryker, Bandit, and Gosec as recommendations for the generated strategy. These are standard industry tools and do not involve autonomous execution of untrusted remote code.
Audit Metadata