uw-analyze-integration-tests
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill employs restricted tool permissions, limiting
Bashtomkdirandls, and restricting file writing and editing to thedocs/unwind/**directory. This implementation follows the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase content (integration tests) to generate documentation. This constitutes an ingestion surface; however, the skill only performs analysis and documentation tasks without executing the ingested content, and its available tools are sufficiently restricted to prevent exploitation.
- [SAFE]: The code examples provided within the skill for TestContainers and WireMock use standard, non-sensitive credentials (e.g.,
test/test) and placeholder GitHub URLs, which are appropriate for testing documentation templates.
Audit Metadata