e2e
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various development commands using the 'mise' task runner and a local repository script. Evidence: The instructions invoke 'mise run test:e2e', 'mise run fmt', 'mise run lint', and 'scripts/download-e2e-artifacts.sh' to manage the test and triage lifecycle.
- [EXTERNAL_DOWNLOADS]: The skill fetches test artifacts from GitHub Actions to perform remote triage. Evidence: The script 'scripts/download-e2e-artifacts.sh' is used to download data from GitHub, which is a well-known service.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted test artifacts such as console logs and transcripts.
- Ingestion points: Files in 'e2e/artifacts/', specifically 'console.log' and 'entire.log', are read into the agent's context.
- Boundary markers: None identified in the instructions for reading artifact files to distinguish instructions from data.
- Capability inventory: The skill can execute shell commands via 'mise', run local scripts, and modify files in the working tree.
- Sanitization: No explicit sanitization or filtering of the log content is performed before processing.
Audit Metadata