cawplan-testcase-import
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a 'preview-first' workflow and mandatory user confirmation gates ('execute --confirm') for all TestRail import operations, ensuring user oversight.
- [SAFE]: The data conversion script
scripts/convert_generate_to_import.jsis written in plain JavaScript using only standard Node.js libraries (fs,path) and contains no obfuscation or dynamic execution patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes external requirement data and test cases. Ingestion points include requirement and testpoint APIs; boundary markers are enforced via mandatory preview and confirmation steps; capabilities include TestRail CLI operations and local script execution; sanitization is performed by the conversion script.
Audit Metadata