test-unit
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for Indirect Prompt Injection.
- Ingestion points: The skill reads local project files (source code, tests, manifests), fetches documentation via
Context7, scrapes external websites viaFirecrawl, and ingests production error data from Sentry. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are used when interpolating this external data into the agent's context.
- Capability inventory: The agent has the ability to execute shell commands (for testing and coverage), write files (new test cases), and execute SQL queries via the Supabase MCP tool.
- Sanitization: There is no evidence of sanitization or validation of the content retrieved from external URLs or Sentry logs before it is used to influence test generation logic.
Audit Metadata