functional-testcases
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation transformation tool, converting technical design artifacts into human-readable markdown test cases. Its operations are confined to reading design files and writing results to a specific, non-sensitive directory structure (
.maestro/). - [DATA_EXPOSURE]: The instructions include a dedicated safety guideline under 'Coverage standards' that prohibits the use of real secrets or production data, ensuring that generated test cases remain safe for use in development environments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external design files (HLD, OpenAPI contracts). While this creates an indirect prompt injection surface, the risk is mitigated by the skill's narrow focus on generating structured text following a predefined template and the absence of high-risk automated actions based on that data.
Audit Metadata