assertion-quality
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted code from test and production source files. This creates a potential attack surface where malicious instructions embedded in the analyzed code could attempt to influence the agent's behavior.
- Ingestion points: Test files and production code (Inputs table, Step 2).
- Boundary markers: No explicit delimiters or boundary markers are defined to isolate untrusted data.
- Capability inventory: Reading local files, invoking the test-analysis-extensions skill, and generating markdown reports. No file-writing or shell execution capabilities are utilized.
- Sanitization: No sanitization or validation of the ingested code is specified.
- [SAFE]: The skill's primary operations involve classification of assertion patterns and calculation of testing metrics. It does not perform network operations, access sensitive credentials, or execute external code.
Audit Metadata