cherry-regression-test
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local scripts and testing commands within the repository environment.
- Evidence:
pnpm exec tsx scripts/cherry-regression-test/cli.ts run-phaseandpnpm test:e2e:regression --listinSKILL.md. - Context: These commands are used to drive the testing framework developed by the vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates testing of features (Chat, Agents, Knowledge Bases) that process external or untrusted data.
- Ingestion points: The documentation mentions testing Chat, Agents, Skills, and knowledge bases.
- Boundary markers: Not specified, though the skill emphasizes deterministic tests and platform-owned helpers.
- Capability inventory: The process involves controlling an Electron instance and running TypeScript scripts.
- Sanitization: Not explicitly mentioned in the skill instructions.
- [CREDENTIALS_UNSAFE]: The skill defines environment variable names for authentication but provides safety rules to prevent their exposure.
- Evidence: Reference to
CHERRY_TEST_CUSTOM_PROVIDER_API_KEYand other sensitive variables inSKILL.md. - Context: The skill explicitly warns against printing credentials or including them in test artifacts like Playwright Traces.
Audit Metadata