circleci-smarter-testing-onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes the official
circleciCLI for project onboarding and configuration, which is consistent with its stated purpose and the trusted vendor context. - [SAFE]: Instructions include clear security guardrails to avoid hardcoding secrets in configuration files, specifically recommending the use of environment variables or CircleCI contexts.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an automated feedback loop where the agent interprets the output of the
circleci testsuite doctorcommand to apply fixes to local configuration files. - Ingestion points: Command-line output from
circleci testsuite doctor --jsondescribed inSKILL.md. - Boundary markers: Not explicitly defined in the instructions for the tool output.
- Capability inventory: Subprocess execution of
circleci testsuiteand file system write access to.circleci/config.ymland.circleci/test-suites.yml. - Sanitization: The skill relies on the agent's interpretation of tool output without explicit sanitization steps.
Audit Metadata