frontend-testing
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include standard development commands for executing tests and checking coverage locally.\n
- Evidence:
npm testandnpm run test:coverageinSKILL.md.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for reading and analyzing external source code to generate unit and integration tests. This processes potentially untrusted data that could contain malicious instructions.\n - Ingestion points: Frontend source code files in the target directories (
SKILL.md,references/workflow.md).\n - Boundary markers: Relies on the agent performing a complete reading of the source file to understand context, rather than using explicit delimiters.\n
- Capability inventory: Shell command execution via
npm testis documented for verifying generated code.\n - Sanitization: Mitigation is provided through the use of standardized templates and a verification checklist to ensure test quality and correctness.
Audit Metadata