test-data-requirement-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted test requirements and schemas which is a potential surface for indirect prompt injection.
- Ingestion points: Test requirements, user stories, data schemas, and API contracts defined in
prompts/test-data-requirement-analysis.md. - Boundary markers: Implements a mandatory six-part input audit (known, missing, conflicting, stale, out_of_scope, assumptions) to categorize incoming information.
- Capability inventory: No tool use or shell commands are authorized; behavior is restricted to text-based analysis output.
- Sanitization: Instructions explicitly mandate using synthetic data over real data and require human validation for all blocking decisions.
Audit Metadata