e2e-verify
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common shell commands such as
npm run,npx playwright, andbashto launch the local application and execute feature-specific test suites. These actions are consistent with the skill's purpose of verifying software functionality in a development environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration from
package.jsonand performs directory listing checks to determine which testing framework is in use. This ingestion of local data represents a surface for indirect instructions to influence agent behavior. 1. Ingestion points: Project configuration files (package.json) and directory structure analysis. 2. Boundary markers: There are no explicit markers or warnings used to isolate ingested data from the agent's instructions. 3. Capability inventory: The skill is permitted to useBash,Write,Read, andEdittools. 4. Sanitization: The skill does not perform validation or filtering on the content read from local files.
Audit Metadata