new-java-e2e-test-yaml-and-test
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents a standard development process for creating Java integration tests using a local test harness and YAML snapshots. It provides templates for test code and data files consistent with the stated purpose.
- [COMMAND_EXECUTION]: Includes standard Maven commands for running tests locally (e.g.,
mvn failsafe:integration-test,mvn clean verify). these are standard developer tools used for project verification and do not involve unauthorized privilege escalation or external script execution. - [INDIRECT_PROMPT_INJECTION]: While the skill describes a system that processes YAML snapshots containing prompts and model responses, this is part of a controlled testing environment for developer-authored content. The skill notes that local tool execution occurs during testing (e.g., the
viewtool), which is standard functionality for the described integration test harness. No evidence of untrusted data ingestion from external sources was found. - Ingestion points:
test/snapshots/YAML files. - Boundary markers: Absent in data, but usage is restricted to the internal test harness.
- Capability inventory: Local command execution via Maven and CLI tools (
view) as part of the test suite. - Sanitization: None explicitly defined within the skill instructions.
Audit Metadata