modernization-integration-tests
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill is designed to generate and execute shell and PowerShell scripts that manage the testing lifecycle, including infrastructure provisioning with Docker and application building via Maven or Gradle. These actions are performed to verify application integrity during modernization.
- Indirect Prompt Injection: To generate test plans and summaries, the skill analyzes project source files and git history. This ingestion of external data is a standard consideration for automated analysis tools, and the skill follows a structured workflow to maintain consistency.
- External Dependencies: The testing framework utilizes official container images from the Microsoft Container Registry (mcr.microsoft.com) to emulate Azure services. These are well-known vendor resources provided for local development and testing purposes.
- Credential Handling: The skill provides guidance on using well-known, public credentials for local emulators (such as Azurite). These are standard industry defaults for testing and do not represent the exposure of actual secrets or sensitive production data.
Audit Metadata