webstrom-test-creator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from repository configuration files to automate the creation of IDE settings, which is a standard behavior for development tools but constitutes an input surface.\n
- Ingestion points: Reads from package.json, Vitest configuration files, and existing XML templates.\n
- Boundary markers: Relies on project-specific testing conventions and Vitest include/exclude rules as implicit data boundaries.\n
- Capability inventory: File system write access to the .run/ folder and execution of validation commands.\n
- Sanitization: Uses xmllint to perform structural validation of the generated XML content.\n- [COMMAND_EXECUTION]: The skill uses local shell commands to verify the integrity and formatting of generated files.\n
- Evidence: Executes xmllint --noout and git diff --check for verification purposes. These are standard, safe developer utilities used for syntax and consistency checks.
Audit Metadata