running-smoke-tests
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and evaluation of content from external websites, which creates a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to fetch content from external URLs using tools like
curland Playwright to validate health checks and UI elements (SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external content as untrusted or to ignore any potential instructions embedded within that content.
- Capability inventory: The agent possesses the
Writetool to create scripts and theBashtool (restricted totest:smoke-*commands) to execute the test suite. - Sanitization: The skill lacks defined sanitization or validation logic for external responses before they are processed by the agent.
Audit Metadata