pytest-skill
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates unit tests based on code and requirements provided in the user context, which is an inherent surface for indirect prompt injection.
- Ingestion points: Python code snippets and function definitions supplied by the user in the agent prompt.
- Boundary markers: The skill does not explicitly define markers or instructions to isolate user-provided code from the test generation instructions.
- Capability inventory: The generated test code facilitates file system operations (via the
tmp_pathfixture), database transactions, and network mocking. - Sanitization: No input validation or sanitization is performed on the code provided for test generation.
- [EXTERNAL_DOWNLOADS]: The CI/CD implementation guide references official and well-known GitHub Actions for automated testing workflows.
- Evidence: The GitHub Actions configuration in
reference/playbook.mdreferencesactions/checkout@v4,actions/setup-python@v5, andcodecov/codecov-action@v4.
Audit Metadata