e2e-testing
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of educational markdown content and code snippets for Java-based testing. No executable scripts, obfuscated payloads, or malicious commands are present. The reference to selenium.dev is to an official technology service documentation site.\n- [INDIRECT_PROMPT_INJECTION]: The skill patterns demonstrate interaction with external web content via browser automation, which creates a potential surface for indirect instructions. However, this interaction is the primary intended purpose of an E2E testing tool and no malicious exploitation patterns were found.\n
- Ingestion points: Interaction with web pages via
driver.get()andfindElement()as described in the Java snippets in SKILL.md.\n - Boundary markers: No delimiters or instructions to ignore embedded content are present in the examples.\n
- Capability inventory: Browser automation capabilities including navigation and interaction with any URL via
driver.get()and element interaction in SKILL.md.\n - Sanitization: No sanitization or content filtering is implemented in the provided test patterns.
Audit Metadata