testability-obstacle
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes C# source code and project metadata from the user's workspace to identify testability obstacles.
- Ingestion points: Step 1 involves reading target production source files and existing test projects.
- Boundary markers: The instructions do not specify the use of boundary markers or 'ignore' instructions when processing this external content.
- Capability inventory: The agent is granted capabilities to write new C# files (Steps 3 and 5) and execute build/test commands (Step 6).
- Sanitization: There is no mention of sanitizing or validating the ingested source code content before the agent acts upon it.
- [DYNAMIC_EXECUTION]: The skill's primary workflow involves the generation and runtime compilation of C# code to create test mocks and wrappers. While this is the core utility of the skill for developers, it represents a dynamic execution surface within the local environment.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands, specifically build and test tools (such as dotnet build/test), to verify that the introduced seams function correctly and that the new tests pass.
Audit Metadata