test-fixing

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands including make test, git diff, and uv run pytest. These are routine development operations used to identify failures and verify code changes.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes external data from test logs and version control history.
  • Ingestion points: Test failure outputs from make and pytest, and file changes from git diff (SKILL.md).
  • Boundary markers: No explicit delimiters or instructions to ignore embedded instructions in the test output are provided.
  • Capability inventory: The skill possesses the capability to execute shell commands and modify local source code via the 'Edit tool'.
  • Sanitization: The skill does not implement specific sanitization or validation logic for the ingested test data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 05:57 PM