integration-test-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for generating code and configurations based on user-supplied integration test requirements, creating a surface for indirect prompt injection.
- Ingestion points: Processes user requests containing integration test specifications, patterns, and third-party API details (SKILL.md).
- Boundary markers: Absent. The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious commands embedded within user-provided test requirements.
- Capability inventory: High. The skill is configured to use
Bash(cmd:*),Write,Edit,Read, andGrep(SKILL.md). - Sanitization: Absent. There are no instructions provided to sanitize, validate, or escape content provided by the user before it is used in code generation or bash command execution.
Audit Metadata