test-case-writing
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands like
git diffto analyze implementation logic and identify changes in the code repository.\n- [DYNAMIC_EXECUTION]: The skill instructs the agent to run a local Python script located at../core/scripts/validate_schema.pyto perform schema validation and verify data consistency.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external code and documentation, which could contain malicious instructions designed to influence the agent.\n - Ingestion points: The skill accepts code repositories (local or remote), requirement documents, API specifications, and bug reports as inputs (SKILL.md).\n
- Boundary markers: The instructions lack specific guidance on using delimiters or boundary markers to separate untrusted content from agent instructions.\n
- Capability inventory: The skill has the ability to execute shell commands (git), run local scripts (python), and write files to the project directory.\n
- Sanitization: There are no explicit steps defined in the instruction set to sanitize or escape the content retrieved from external documents before it is processed.
Audit Metadata