generate-tests
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes untrusted source code provided as arguments, which creates a vulnerability to indirect prompt injection. Maliciously crafted content within the analyzed files (e.g., in comments or string literals) could potentially influence the agent's behavior during the test generation process.
- Ingestion points: Target source files, dependencies (DTOs, entities, etc.), and existing test classes are read via the
Readtool inSKILL.md(Step 1). - Boundary markers: The skill does not employ explicit delimiters or 'ignore' instructions when reading the content of target files into the context.
- Capability inventory: The skill possesses significant capabilities including the
Writetool for file modification and theBashtool for executing compilation and test commands (mvn,gradlew,npm). - Sanitization: No sanitization or filtering of the source code content is performed prior to analysis.
Audit Metadata