cawplan-testplan-layout
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A comprehensive security audit of the skill instructions, execution rules, and UX guidelines revealed no malicious intent, hidden commands, or security bypass techniques.\n- [COMMAND_EXECUTION]: The skill uses a proprietary command-line interface (cawplan) via Bash to manage test plans. These operations are conducted within a controlled environment and are specific to the vendor's (cawcut) QA infrastructure.\n- [DATA_EXPOSURE]: The skill does not access sensitive system files (e.g., SSH keys, environment variables) or hardcode any credentials. It correctly handles project-specific metadata and identifiers required for the task.\n- [PROMPT_INJECTION]: No prompt injection or role-play bypass patterns were found. The skill effectively utilizes negative constraints to prevent incorrect tool usage and ensures the agent maintains a high degree of transparency with the user through status reports and confirmation prompts.
Audit Metadata