test-generation
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust 6-phase workflow (Code Understanding, Behavior Enumeration, Coverage Planning, Test Generation, Mocks/Fixtures, and Quality Review) for generating automated tests across multiple languages and frameworks.
- [SAFE]: Security-related instructions include a mandatory redaction policy (BF-SECURITY-1) to ensure no secrets are reproduced in output, and an untrusted content policy (BF-UNTRUSTED-1) that directs the agent to ignore embedded prompt-injection directives in analyzed code.
- [SAFE]: The skill provides defensive test templates for security vulnerabilities such as SQL injection, XSS, and SSRF in its reference documentation. These are correctly treated as inert data used to verify security controls, not as executable payloads.
- [SAFE]: The skill explicitly warns against common testing failures like over-mocking and non-deterministic patterns, and provides protocols for handling untestable code through refactoring rather than brittle tests.
- [SAFE]: No malicious patterns such as remote code execution, persistence, data exfiltration, or unauthorized command execution were detected.
Audit Metadata