validate-test-coverage
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because it ingests untrusted data from the local file system without adequate sanitization or boundary markers.
- Ingestion points: Processes project documentation, user stories, and source code files from
.chalk/docs/and the codebase (SKILL.md). - Boundary markers: The workflow lacks explicit delimiters or instructions to ignore commands that might be embedded within the requirement documents or test files.
- Capability inventory: The skill utilizes
Read,Glob, andGreptools to extract information from the filesystem. - Sanitization: No validation or filtering is applied to the ingested content to prevent the execution of malicious instructions found within data.
Audit Metadata