test-quality
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data, specifically Java source code and method signatures, to generate unit tests and suggest coverage improvements.\n
- Ingestion points: User-provided code and signatures are ingested as context for the AI agent to perform its tasks, as described in
SKILL.md.\n - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the user-provided code.\n
- Capability inventory: The skill instructions lead the agent to suggest shell commands (
mvn,open) and generate file content for new test classes.\n - Sanitization: There is no mention of sanitizing or validating the ingested content to prevent instructions within the code from being executed by the AI.
Audit Metadata