test-safety-net
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses language-specific test runners like pytest, node --test, go test, and cargo test to validate generated tests. This execution is confined to the local environment and intended for চরিত্রization.
- [DYNAMIC_EXECUTION]: To maintain security invariants, the skill generates and compiles auxiliary logic (Go overlays and Rust hook libraries) at runtime. These components are built using the local toolchain and are used to intercept system calls to block unauthorized I/O.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted code from the repository. It addresses the risk of data-to-code injection by enforcing a 'literal-emission rule,' which requires the agent to use repr() or equivalent sanitization when embedding program output into test files.
Audit Metadata