acceptance-test-authoring
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.callandos.execvinrun_acceptance.pyto launch thebehavetest runner andgherkin-lint. These calls are localized to the project environment and are fundamental to the skill's purpose of providing an acceptance testing framework. - [EXTERNAL_DOWNLOADS]: The instructions and configuration files reference standard development tools and libraries, including
behave,cucumber-js,cheerio, andgherkin-lint. These are well-known packages in the testing community and are used for their intended purposes. - [INDIRECT_PROMPT_INJECTION]: The skill implements an ingestion surface for Markdown-based Gherkin specifications, but incorporates strong structural boundaries. * Ingestion points: Specification files located at
openspec/specs/**/spec.mdandopenspec/changes/**/spec.md(processed inextract_gherkin.pyandextract-gherkin.cjs). * Boundary markers: The extraction logic uses explicit H1-H4 Markdown headings and column-0 ```gherkin fences to isolate executable test steps from descriptive prose. * Capability inventory: The extracted feature files are passed to local test runners (behave,cucumber-js) and linters (gherkin-lint) as part of the local development workflow. * Sanitization: The extraction process normalizes Gherkin keywords and strictly ignores all text outside of designated fences, effectively preventing non-test prose from being executed as Gherkin structure.
Audit Metadata