testing-qa
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code templates for testing Next.js applications.
- [COMMAND_EXECUTION]: The skill includes configuration for
npm run devand instructions for running tests vianpx playwright test. These are standard development operations for the described workflow. - [INDIRECT_PROMPT_INJECTION]: The testing patterns involve interacting with web content (e.g.,
page.goto,screen.getByText). This represents an attack surface for indirect prompt injection from the application under test, which is a known risk in automated testing environments but considered acceptable for documentation of this nature. - Ingestion points: Web page content parsed by testing libraries (SKILL.md).
- Boundary markers: None (standard for code documentation).
- Capability inventory: Shell access for test runners (SKILL.md).
- Sanitization: None.
Audit Metadata