test-fixing
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands including
make test,git diff, anduv run pytest. These are routine development operations used to identify failures and verify code changes. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes external data from test logs and version control history.
- Ingestion points: Test failure outputs from
makeandpytest, and file changes fromgit diff(SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded instructions in the test output are provided.
- Capability inventory: The skill possesses the capability to execute shell commands and modify local source code via the 'Edit tool'.
- Sanitization: The skill does not implement specific sanitization or validation logic for the ingested test data.
Audit Metadata