security-test-generator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of project source code and manifest files (e.g., package.json, requirements.txt, route handlers) to synthesize security tests. This creates a surface where malicious instructions embedded in the analyzed code could influence the agent's output.
- Ingestion points: The skill explicitly instructs the agent to inspect manifest files like
package.json,requirements.txt,setup.py,pyproject.toml, andgo.mod, as well as application source files containing route definitions. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following natural language instructions found within the code or comments of the files being analyzed.
- Capability inventory: The skill is capable of generating complex code structures, including malicious payloads for SQL injection, XSS, and CSRF, which are then outputted for user execution.
- Sanitization: The skill does not specify any sanitization, validation, or filtering mechanisms for the data extracted from the analyzed source files before it is used to generate the test suites.
Audit Metadata