ns-backend-tests
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
docker execto run PHPUnit tests inside a designated test container. This is the primary function of the skill and is constrained by a mandatory 120-secondtimeoutwrapper to prevent resource exhaustion or hanging processes. Execution is explicitly restricted to the test container and forbidden on the host system. - [DATA_EXPOSURE]: The skill performs automated discovery of the project structure by reading configuration files like
phpunit.xmlandcomposer.json, as well as source code files (Services, Controllers). This data access is scoped to the backend directory and is used strictly for identifying the test environment and generating relevant test cases. - [INDIRECT_PROMPT_INJECTION]: As the skill ingests and analyzes user-provided source code to generate tests, it possesses an inherent attack surface for indirect prompt injection via malicious code comments. However, the skill provides specific instructions for the agent to follow established project patterns and rulesets, which mitigates accidental obedience to embedded instructions.
Audit Metadata