mutation-test-runner
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it is designed to read data from the local environment and has access to high-privilege tools.
- Ingestion points: The skill is configured to use the Read and Grep tools to process file content from the project directory.
- Boundary markers: There are no instructions or delimiters specified to ensure the agent ignores or treats cautiously any instructions embedded within the files it reads.
- Capability inventory: The skill is granted extensive capabilities, including arbitrary command execution via Bash(cmd:*) and the ability to modify files via the Write and Edit tools.
- Sanitization: The instructions do not include any guidance on sanitizing or validating the content extracted from external files before it is processed or used in shell commands.
Audit Metadata