comprehensive-test-review
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external test files and directories, creating an indirect prompt injection surface where instructions hidden in the code being reviewed could target the agent.
- Ingestion points: The skill ingests untrusted data from the path provided in the
<test_file_or_directory>argument as defined inSKILL.md. - Boundary markers: No specific boundary markers or delimiters are defined in
SKILL.mdto isolate external data from the prompt context. - Capability inventory:
SKILL.mdinstructs the agent to perform command execution viapytestand use thepython-engineering:python-pytest-architecttool. - Sanitization: The skill does not implement specific sanitization or filtering of the ingested content.
- [DYNAMIC_EXECUTION]: The skill requires the execution of code through
pytestand potentially other tools to validate test behavior and collect execution evidence. This dynamic execution is restricted to the local environment and is necessary for the skill's primary purpose of test auditing.
Audit Metadata