e2e
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted project data (source code, API schemas, and existing tests) to generate BDD scenarios and autotests.\n
- Ingestion points: Target project analysis phases in
mode-install.md(S2) andmode-create.md(C2).\n - Boundary markers: The skill uses a structured delegation contract (GOAL, ROLE, SCOPE, CONTEXT, CONSUMER, DONE) to isolate sub-agent tasks.\n
- Capability inventory: Access to
Bash,Write,Edit, andAgenttools across various scripts.\n - Sanitization: Key decisions and artifacts are validated through
AskUserQuestionand multi-agent quorum reviews.\n- [COMMAND_EXECUTION]: The skill executes local shell scripts for environment detection and triggers project-specific build tools to validate generated tests.\n - Evidence:
detect-mode.shis executed inSKILL.mdto resolve versions and modes.\n - Evidence: Build commands like
mvn compile,npx tsc, anddotnet buildare utilized inmode-create.mdfor compilation checks.
Audit Metadata