e2e
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to read existing configuration and test files within the project workspace to maintain consistency. This represents a potential surface for indirect prompt injection if those project files contain malicious instructions.
- Ingestion points: The skill reads
package.json,cypress.config.ts, and existing test files in thecypress/e2e/directory. - Boundary markers: The instructions do not define specific boundary markers or warnings to ignore embedded instructions in the ingested data.
- Capability inventory: The skill is authorized to write new test files to the
cypress/e2e/directory and suggests running package management commands (npm install) or initialization commands (npx cypress open). - Sanitization: No explicit sanitization or validation of the ingested file content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
@testing-library/cypress, which is a widely recognized and standard testing utility within the Node.js ecosystem.
Audit Metadata