qa
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard Git operations such as
git diff,git status,git stash, andgit committo identify changes and commit fixes as part of the QA workflow. These commands are appropriate for the skill's stated purpose of software testing and maintenance. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by navigating to web pages, inspecting the DOM, and reading browser console logs. Maliciously crafted web content could potentially attempt to influence the agent's behavior during the 'Fix and Verify' loop.
- Ingestion points: Web page content, browser console output, and terminal output from test runners.
- Boundary markers: Not explicitly defined for external content.
- Capability inventory: The skill has the capability to modify source code and execute repository commits (
git commit). - Sanitization: No explicit sanitization or filtering of external console logs or page content is mentioned.
Audit Metadata