testing-design
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it is designed to ingest and analyze user-provided source code to generate test cases.\n
- Ingestion points: The workflow involves identifying and analyzing target function and module signatures from files provided by the user (Workflow section).\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' warnings for content within the analyzed code.\n
- Capability inventory: The skill generates and outputs test code for frameworks like Jest, pytest, and JUnit (Workflow section, Step 6).\n
- Sanitization: No explicit sanitization or validation of the input source code is described.\n- [NO_CODE]: The skill consists entirely of instructional documentation in Markdown and does not include any executable scripts, binaries, or shell commands.\n- [SAFE]: No malicious patterns, data exfiltration attempts, or unauthorized command executions were detected. The technical methodology described is aligned with industry-standard software testing practices.
Audit Metadata