maintainable-tests

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and refactor local source code and test suites, creating a surface where malicious instructions embedded in the repository code could influence the agent's behavior during a review or adversarial sweep.
  • Ingestion points: Local source code files, test files, and contract documentation (.md) read by the agent or scanner script (e.g., scripts/analyze_maintainable_tests.py).
  • Boundary markers: Absent. The skill instructions do not explicitly require the use of delimiters or system-level instructions to ignore embedded prompts in analyzed code.
  • Capability inventory: The agent possesses file reading, file writing (for repairs and new tests), and command execution (running the scanner script) capabilities.
  • Sanitization: Absent. The skill does not describe any specific sanitization or validation of the content of the files it processes.
  • [COMMAND_EXECUTION]: The skill includes a Python-based scanner utility and instructions for its execution (python3 scripts/analyze_maintainable_tests.py <path>). Additionally, the accompanying test suite (scripts/test_analyze_maintainable_tests.py) uses subprocess.run() to execute this scanner during verification. These commands are local, utilize relative paths to the skill's own scripts, and serve the primary functional purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 08:58 PM