The Agent Skills Directory

[SAFE]: The skill provides a comprehensive collection of markdown and CSV templates designed to assist QA engineers in producing standard ISTQB-aligned deliverables. The documentation and reference materials contain legitimate educational content on test design, estimation, and defect management.
[COMMAND_EXECUTION]: A bundled Node.js script, qa_artifacts.mjs, is provided to automate the generation of QA documents. Analysis of the script confirms it performs local file operations (reading templates and writing rendered files) using a secure character whitelist for generated filenames and simple string substitution for content. It does not utilize dangerous functions such as eval() or exec() for shell execution.
[INDIRECT_PROMPT_INJECTION]: The skill is intended to process external requirements and user stories to generate test cases and reports. While this creates an ingestion surface for potentially untrusted data, the skill does not possess high-risk capabilities such as network access or credential retrieval, and its output is limited to static text files.

qa-manual-istqb