ns-backend-tests
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands via docker exec for PHPUnit tests. It incorporates a mandatory 120-second timeout to mitigate hung processes. \n- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection due to processing untrusted data. \n
- Ingestion points: Reads application implementation and test files during Phase 1 in SKILL.md. \n
- Boundary markers: Absent; there are no instructions to delimit or ignore embedded commands in the ingested code. \n
- Capability inventory: Uses docker exec for command execution as described in Phase 3 of SKILL.md and references/backend-testing-architecture.md. \n
- Sanitization: Absent; the content is not sanitized before processing.
Audit Metadata