pest-testing
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and best practices for writing feature, unit, and browser tests with Pest v4. Analysis of SKILL.md and the accompanying reference files (core.md, browser.md, laravel.md) shows that all provided code snippets and commands are standard for Laravel development. There are no instances of obfuscation, hardcoded credentials, or suspicious remote code execution patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill focuses on generating and running tests for local project code, which creates an inherent attack surface for indirect prompt injection if the codebase being analyzed is untrusted.
- Ingestion points: Local project source code and test files located in the
tests/directory as described inSKILL.md. - Boundary markers: Absent; the skill does not specify any isolation or delimiting markers when the agent reads untrusted application code.
- Capability inventory: The skill suggests using the
php artisan testcommand (referenced inSKILL.md), which executes the local application code and test logic. - Sanitization: Absent; no sanitization or verification of the project's code integrity is performed before the agent suggests or executes tests.
Audit Metadata