test-framework-migration-skill
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted test automation scripts (Selenium, Playwright, Puppeteer, Cypress) provided by the user to perform framework migration. This creates a potential surface for indirect prompt injection if the source code contains malicious instructions intended to influence the agent's behavior during the conversion process.
- Ingestion points: User-provided source code files and code snippets in chat messages (SKILL.md, reference/playbook.md).
- Boundary markers: The instructions do not explicitly define delimiters or 'ignore' instructions for the ingested code, though it is processed within a structured migration workflow.
- Capability inventory: The skill utilizes standard developer tools and commands (
find,grep,npm,npx,mvn) to audit codebases and execute tests in the target framework (reference/playbook.md). - Sanitization: No specific sanitization or filtering of the input source code is mentioned before processing.
Audit Metadata