code-testing-agent
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill coordinates various shell commands to build, test, and format code (e.g.,
dotnet build,pytest,go test,dotnet format). These commands are essential for the verification phase of the pipeline, ensuring that generated tests are valid and meet project standards. - [File System Interaction]: The agent reads existing source code to understand APIs and writes new test files into the project structure. It also maintains its internal state, such as research and planning documents, within a dedicated
.testagent/directory in the repository. - [Indirect Prompt Injection Surface]: The skill analyzes project source code to inform the test generation process. As it ingests external data (the codebase), there is a potential surface for indirect prompt injection. However, the skill's instructions specifically emphasize logical analysis and the use of mocks for external components, which serves as a natural mitigation.
- [Dynamic Code Verification]: Through its builder and tester sub-agents, the skill performs runtime compilation and execution of code. This is limited to the scope of the project's testing environment and is used to validate that the generated unit tests behave as expected.
Audit Metadata