uw-analyze-integration-tests

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill employs restricted tool permissions, limiting Bash to mkdir and ls, and restricting file writing and editing to the docs/unwind/** directory. This implementation follows the principle of least privilege.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase content (integration tests) to generate documentation. This constitutes an ingestion surface; however, the skill only performs analysis and documentation tasks without executing the ingested content, and its available tools are sufficiently restricted to prevent exploitation.
  • [SAFE]: The code examples provided within the skill for TestContainers and WireMock use standard, non-sensitive credentials (e.g., test/test) and placeholder GitHub URLs, which are appropriate for testing documentation templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 01:33 AM