test-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and follow instructions from external local files, creating a theoretical surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points:
SKILL.md(references to../testing-standard/SKILL.mdandreferences/local-conventions.md). - Boundary markers: Absent; the agent is instructed to treat the content of these files as the "canonical testing policy."
- Capability inventory: Reading and reporting on repository files and testing configurations.
- Sanitization: None; the instructions are adopted directly as policy guidelines.
Audit Metadata