build-test-suite
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Instructions include execution of the coval CLI tool for managing test infrastructure. These operations are restricted to the vendor's platform environment.
- [INDIRECT_PROMPT_INJECTION]: The skill involves creating test scenarios from external data. It mitigates injection risks by enforcing the use of JSON-based inputs for tool execution. 1. Ingestion points: Reads from requirement docs and failure logs. 2. Boundary markers: Mandates structured JSON to isolate external strings. 3. Capability inventory: CLI-based resource creation. 4. Sanitization: Data is validated through structured JSON serialization.
- [EXTERNAL_DOWNLOADS]: Fetches schema information from api.coval.dev, which is the vendor's official domain for technical specifications.
Audit Metadata