test-skill
Warn
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executedocker composecommands that run askill-testercontainer. This container executes dynamically generated Python test files usingpytest. - [DYNAMIC_EXECUTION]: The skill generates executable Python scripts (e.g.,
test/tests/test_{snake_name}.py) by interpolating user-provided scenario descriptions, judge questions, and prompt strings into a predefined template. These scripts are subsequently executed in a shell environment via Docker. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external
SKILL.mdfiles from thedstoic/skills/directory to generate "golden fixtures" and test scaffolds. There are no explicit sanitization or boundary markers defined to prevent malicious instructions within these external files from influencing the generated code or agent behavior during the testing process. - Ingestion points: Reads
dstoic/skills/{skill_name}/SKILL.mdto generate simplified versions and test files. - Boundary markers: None identified for external content ingestion.
- Capability inventory: Uses
Bash,Write, andEdittools; executes Docker commands and generates Python scripts. - Sanitization: No evidence of input validation or escaping for the content read from external skills.
Audit Metadata