writing-tests-that-can-fail
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is composed of instructional documentation and reference guides designed to improve the quality of agent-generated code.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or suspicious downloads were identified. The install commands in the README refer to the standard installation procedure for this skill platform. All external links point to legitimate documentation (e.g., Microsoft Learn, Go Package Discovery, Swift Docs) or academic research (arXiv).
- [PROMPT_INJECTION]: The skill uses instructional language to guide agent behavior toward more rigorous testing practices. It specifically instructs the agent to stop and report when requirements are contradictory, which serves as a safeguard against deceptive behavior and 'green-washing' (making code look correct without actually being so).
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external data such as specifications, tickets, and existing codebases, it does not introduce new vulnerabilities beyond the inherent risks of processing untrusted code in a development environment. It actually encourages literal extraction of values from specs, which can reduce ambiguity.
- [CREDENTIALS_SAFE]: No hardcoded credentials or attempts to access sensitive file paths (like .ssh or .aws) were found.
- [OBFUSCATION]: No obfuscated content, hidden characters, or deceptive URLs were detected in any of the files.
Audit Metadata