generating-test-doubles
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses
globandreadto ingest existing codebase files to determine interface definitions. Malicious instructions embedded in the analyzed source code (e.g., in comments or string literals) could theoretically influence the agent's behavior, although the skill instructions focus on structural extraction. - [DYNAMIC_EXECUTION]: The bundled
scripts/generate_doubles.pyincludes agenerate_bashmethod that writes shell scripts to the local filesystem and applies executable permissions (chmod 755). This is a core feature for providing automation to the user but represents a dynamic code generation pattern. - [EXTERNAL_DOWNLOADS]: The skill references documentation and repositories for well-known testing libraries including Sinon.js, Mockito, and gomock. These references target trusted and well-known services and do not pose a security risk.
Audit Metadata