ln-23-test-suite-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands defined within the target repository to establish the test baseline and audit performance. This creates a risk where a malicious repository could cause the agent to execute arbitrary code on the local system, although the skill attempts to mitigate this by specifying the use of 'safe' diagnostic commands.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data including source code, test suites, and CI logs. This data surface could be used to inject malicious instructions to manipulate the audit outcome or agent behavior.
- Ingestion points: The skill reads source files, test manifests, CI configurations, and repository logs as evidenced in the 'Map the Portfolio and Baseline' section.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to separate content read from files from its internal processing instructions.
- Capability inventory: The agent is granted capabilities to list directories, search files, read file content, and execute shell commands.
- Sanitization: The skill lacks instructions for sanitizing or escaping the content of the external files it processes.
- [DYNAMIC_EXECUTION]: The skill relies on running test suites and diagnostic tools at runtime to evaluate the state of the repository, which involves executing dynamically identified commands and analyzing their outputs.
Audit Metadata