codeceptjs-run-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from test run artifacts, such as HTML snapshots, console logs, and ARIA snapshots. These files could potentially contain malicious instructions if the application under test reflects untrusted input into the logs or page source.
- Ingestion points: Files located within the
output/trace_*directories, specificallytrace.md,console.json,storage.json, andpage.html. - Boundary markers: The instructions do not explicitly mandate the use of delimiters or 'ignore' warnings when the agent interprets content from these files.
- Capability inventory: The skill uses standard bash utilities including
ls,grep,jq,sort,uniq, anddifffor analysis. - Sanitization: No specific sanitization or filtering of the artifact content is mentioned before it is processed by the agent.
Audit Metadata