pm-unit-test-task-generator
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation generator for unit and integration testing tasks. It does not perform direct code execution, network operations, or sensitive file access.
- [COMMAND_EXECUTION]: The skill instructs the agent to include specific command-line strings (e.g., PHPUnit runner) in the generated output files. These commands are intended for human review or downstream execution tools and are not executed by the skill itself during the generation process.
- [PROMPT_INJECTION]: The skill processes external project files such as 'requirements.md' and implementation tasks. While this creates a surface for indirect prompt injection, the skill's primary function is text generation for planning purposes, and it lacks dangerous capabilities that could be exploited by such an injection.
Audit Metadata