sb-test-react-behaviour
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exposes the agent to indirect prompt injection (Category 8) by requiring the analysis of external, potentially untrusted source files.
- Ingestion points: The workflow in
SKILL.mdinstructs the agent to read existing React components (.tsx) and custom hooks to determine observable behaviors for test generation. - Boundary markers: Absent; the instructions do not provide delimiters or warnings to ignore natural language instructions that might be embedded in code comments or strings within the analyzed files.
- Capability inventory: The skill utilizes the ability to create new test files and execute shell commands, specifically
vitest run, to validate test results. - Sanitization: Absent; there are no instructions to sanitize, validate, or escape the content of the source files before they are processed by the agent.
Audit Metadata