ln-23-test-suite-auditor
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and analyzes untrusted data from repository source code, test manifests, and environment configurations.
- Ingestion points: Repository source files, test fixtures, CI configuration files, and primary-source documentation retrieved via web research (SKILL.md).
- Boundary markers: Absent; the instructions do not define specific delimiters or instructions to ignore embedded commands within the processed files.
- Capability inventory: Shell command execution, filesystem read access, and network access for documentation research (SKILL.md).
- Sanitization: Absent; no logic is provided to filter, validate, or escape content retrieved from the analyzed repository.
- [COMMAND_EXECUTION]: The skill executes shell commands defined within the target repository to establish test baselines and diagnose isolation issues. These are intended to be diagnostic and read-only, following repository-defined test runners and configurations.
- [DATA_EXFILTRATION]: The skill reads project infrastructure and configuration data, including CI pipeline definitions and environment assumptions, which may contain sensitive operational information or configuration metadata.
Audit Metadata