test-case-writing-en
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains multiple utility scripts in the
scripts/directory that usesubprocess.callto chain operations between internal Python files. These calls are constructed using specific paths to local scripts (e.g.,convert_formats.py) and do not useshell=True, which is a safe implementation for internal batch processing and format conversion. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external requirement documents in formats like Word, Excel, and CSV. This represents an indirect prompt injection surface where the agent might encounter instructions embedded in processed data. However, this is an inherent part of the skill's primary function for software testing analysis, and the implementation uses standard, non-executable parsing libraries.
Audit Metadata