windsurf-test-generation
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided source code to generate tests, which creates a potential indirect prompt injection surface.
- Ingestion points: Target source code files (components, utilities, services) are read into the context for analysis as described in the
SKILL.mdandimplementation.mdfiles. - Boundary markers: No specific isolation markers or delimiters are defined to separate user code from instructions.
- Capability inventory: The skill utilizes powerful tools including
Bash(cmd:*),Read,Write, andEdit. - Sanitization: No content filtering or validation is implemented for the ingested source code.
Audit Metadata