Skills
Navigate
skills/naodeng/awesome-qa-skills/test-case-reviewer/Gen Agent Trust Hub

test-case-reviewer

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Several wrapper scripts (e.g., scripts/convert_to_csv.py, scripts/parse_excel.py) utilize subprocess.call to invoke the primary conversion and parsing logic in convert_formats.py and parse_formats.py respectively.
  • [DYNAMIC_EXECUTION]: The script scripts/parse_formats.py uses __import__ to dynamically check for and utilize pypdf or PyPDF2 libraries if available in the environment for PDF text extraction.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves parsing and reviewing untrusted external data such as requirements and test cases in various formats (PDF, DOCX, XLSX). While it lacks specific sanitization for prompt injection, this is an inherent risk of its processing capability and is mitigated by the agent's own guardrails.
  • [EXTERNAL_DOWNLOADS]: The README.md documentation references installation scripts (install-skills-mac.sh and install-skills-windows.ps1) located in a parent directory (../scripts/), which are executed during setup but are not part of the provided skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:50 AM