one-page-test-strategy
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's main prompt file
prompts/one-page-test-strategy.mdreferences the URLhttps://www.bylinzi.com/2020/01/10/one-page-test-strategy/as a methodological source. Automated security scanners have identified this domain as being associated with botnet activity. Providing links to compromised or malicious infrastructure in skill documentation presents a risk where agents or users might interact with a malicious endpoint. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data to generate test strategies, creating an attack surface for indirect prompt injection. 1. Ingestion points: Project materials, goals, and risk descriptions provided by the user. 2. Boundary markers: The skill does not employ explicit delimiters or instructions to ignore embedded commands within the ingested content. 3. Capability inventory: The skill is limited to generating Markdown and Mermaid diagrams; it cannot execute shell commands or make outbound network calls itself. 4. Sanitization: There is no evidence of input validation or sanitization before the data is processed.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata