analyze-test-failures
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists solely of instructions and metadata in a markdown format. It does not contain scripts, binaries, or tool definitions that could execute arbitrary code.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external test data, which creates a potential surface for indirect prompt injection from malicious test files.
- Ingestion points: The skill takes a
<test_file_or_test_name>argument and instructs the agent to read tests, fixtures, and stack traces (SKILL.md). - Boundary markers: No specific boundary markers or "ignore embedded instructions" warnings are defined to separate the data being analyzed from the agent's instructions.
- Capability inventory: The skill instructions involve reading files and reproducing tests, though the skill itself does not define the tools to do so.
- Sanitization: No data validation or sanitization requirements are specified for the external content being analyzed.
Audit Metadata