unit-test-task-generator
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files such as
requirements.md,{harness}/rules/backend-tests-rules.mdc, and existing implementation tasks to generate test task descriptions. This creates a potential surface for indirect prompt injection if those files contain malicious instructions, though the risk is negligible as the skill only produces markdown documentation and lacks code execution capabilities. - Ingestion points:
requirements.md,{harness}/rules/backend-tests-rules.mdc,backend-rules.mdc, and previously generated implementation tasks (task-NNN.md). - Boundary markers: No explicit delimiters or warnings are used to instruct the agent to ignore instructions embedded within the source documents.
- Capability inventory: The skill is restricted to generating markdown documentation; it does not include instructions for code execution, file writes, or network access.
- Sanitization: No sanitization or validation is applied to the content extracted from input files.
Audit Metadata