angular-tester
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and existing test files to identify missing test cases and generate new ones. This creates a surface for indirect prompt injection where malicious instructions embedded in the analyzed code could potentially influence the agent's logic.
- Ingestion points: Project production code (components, services, pipes, etc.), existing
*.spec.tsfiles, and configuration files likeangular.jsonorjest.config.js(SKILL.md, Phase 1 & 3). - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts within the ingested code.
- Capability inventory: The agent can read/write local files, execute shell commands via test runners, and dispatch sub-agents (SKILL.md, Phase 2 & 3).
- Sanitization: No sanitization or validation of the input source code is performed before processing.
- [COMMAND_EXECUTION]: The skill invokes shell commands to run the project's test suite, specifically using
ng test,npx jest, andnpx vitest(SKILL.md, Phase 2). While these are the intended functions for an Angular testing utility, they involve executing code that is influenced by the project's local configuration and the generated test files.
Audit Metadata