litestar-testing
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides and documents the use of
subprocess_async_clientandsubprocess_sync_client, which execute thelitestarCLI in a background process for end-to-end testing. - Evidence: Found in
SKILL.mdandreferences/async_testing.mdwithin the "Live Subprocess Clients" and "Live Subprocess Server" sections. - [INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface by demonstrating how to write code to the file system and subsequently execute it using a subprocess helper, which could be exploited to run arbitrary code if an agent is manipulated by untrusted data.
- Ingestion points: User-provided handler logic and application configurations in
SKILL.mdandreferences/async_testing.md. - Boundary markers: Absent in the provided examples.
- Capability inventory: Includes file system writing (
Path.write_textin examples), subprocess execution (subprocess_async_client), and internal network requests (AsyncTestClient). - Sanitization: No explicit sanitization or validation of the generated code strings before execution is demonstrated.
Audit Metadata