frontend-testing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates standard Node.js development commands such as
pnpm test,pnpm test:watch, andpnpm test:coverage. It also references a project-specific analysis scriptpnpm analyze-component. These commands are strictly intended for local development and testing purposes. - [DYNAMIC_EXECUTION]: The core purpose of the skill is the generation of TypeScript test files. This involves the AI creating executable code based on component logic, which is the expected behavior for a test generation assistant.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it analyzes and processes frontend source code provided by the user.
- Ingestion points: Frontend component files, hooks, and utilities located in the project's directory.
- Boundary markers: The instructions do not define specific delimiters for separating user-provided code from instructions, but emphasize manual verification of generated output.
- Capability inventory: Ability to trigger shell commands via the
pnpmCLI for testing and code analysis. - Sanitization: No explicit sanitization of the input code is performed by the skill's instructions.
Audit Metadata