tracking-regression-tests
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting and acting upon untrusted data from the codebase and CI environment.
- Ingestion points: The agent is instructed to read and scan codebase files, git commit messages, and CI test artifacts (JUnit XML or JSON) using tools like
GrepandRead(referenced in SKILL.md). - Boundary markers: The instructions do not define delimiters or explicit boundary markers to help the agent distinguish between its core instructions and the potentially malicious data embedded in the external files it processes.
- Capability inventory: The skill allows the agent to execute shell commands (via a restricted
Bashtool) and perform file modifications (Write,Edit), which could be leveraged if the agent inadvertently follows instructions found within test reports or code comments. - Sanitization: There are no requirements or scripts provided for validating, filtering, or sanitizing the content of test results or commit messages before they are processed and incorporated into reports or CI configurations.
Audit Metadata