frontend-testing

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill incorporates standard Node.js development commands such as pnpm test, pnpm test:watch, and pnpm test:coverage. It also references a project-specific analysis script pnpm analyze-component. These commands are strictly intended for local development and testing purposes.
  • [DYNAMIC_EXECUTION]: The core purpose of the skill is the generation of TypeScript test files. This involves the AI creating executable code based on component logic, which is the expected behavior for a test generation assistant.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it analyzes and processes frontend source code provided by the user.
  • Ingestion points: Frontend component files, hooks, and utilities located in the project's directory.
  • Boundary markers: The instructions do not define specific delimiters for separating user-provided code from instructions, but emphasize manual verification of generated output.
  • Capability inventory: Ability to trigger shell commands via the pnpm CLI for testing and code analysis.
  • Sanitization: No explicit sanitization of the input code is performed by the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:54 AM