migrate-cypress-to-codeceptjs
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run shell commands using
npxfor framework initialization, dry-runs, and test execution (e.g.,npx codeceptjs init,npx codeceptjs run). - [DATA_EXPOSURE]: Provides implementation examples for custom helpers that utilize the Node.js
fsmodule to write JSON data to the local file system. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided Cypress files to generate new CodeceptJS code.
- Ingestion points: The skill reads
cypress.config.*, support files, and all test specifications within thecypress/directory. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following malicious instructions potentially embedded in the source Cypress files.
- Capability inventory: The skill has the capability to execute shell commands, write files, and perform network operations via the REST helper.
- Sanitization: The skill does not specify sanitization or validation steps for content extracted from source files before it is used to generate new executable code.
Audit Metadata