test-generation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external source code to generate test suites, which represents a potential surface for indirect prompt injection.
- Ingestion points: Reads source code from the user-provided
[path]as defined inreferences/generate-tests.md. - Boundary markers: Prompts for subagents do not include specific delimiters to isolate the code being analyzed from the instructions.
- Capability inventory: The subagents utilize
Read,Grep, andGlobtools for code analysis and theWritetool for creating generated test files. - Sanitization: The skill does not implement explicit sanitization or filtering of the source code content before processing.
Audit Metadata