aep-testing-guide
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for shell scripts (
workspace-setup.shand feature-specific E2E scripts) that use system commands likegit,lsof,sed, andchmod. These scripts are intended to automate local environment configuration and service verification. - [EXTERNAL_DOWNLOADS]: The templates describe the use of
curlfor health checks on local endpoints and provide examples of installing project dependencies using standard package managers likenpm,bun,pip, andcargo. - [PROMPT_INJECTION]: The skill defines a workflow where an agent processes data from
.dev-workflow/feature-verification.jsonto perform verification steps, creating an indirect injection surface. - Ingestion point:
.dev-workflow/feature-verification.json(referenced in the Evaluator Integration section). - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the agent when it interprets verification steps from these files.
- Capability inventory: The agent is instructed to execute shell scripts, use
curl, and utilizeagent-browserbased on the logic defined in the processed files. - Sanitization: No explicit validation or sanitization of the JSON content is mentioned in the setup instructions.
Audit Metadata