flaky-test-diagnoser
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to run tests via the
run_test_subprocessactivity. This is the primary mechanism used to reproduce and analyze test flakiness. The specific command to be run is provided by the user via input arguments or inferred from the project's test configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes data including test source code, fixture definitions, and test execution logs (stdout/stderr) to generate hypotheses and synthesize reports.
- Ingestion points: Test files, fixtures, and the output captured from test runs are read and processed by subagents.
- Boundary markers: The skill relies on structured JSON output schemas for its subagents rather than explicit content delimiters for ingested log data.
- Capability inventory: The skill possesses capabilities for shell command execution (
run_test_subprocess) and writing artifacts to the local file system (write_artifact). - Sanitization: Log content is interpolated into prompt templates without explicit sanitization, though the use of constrained JSON output for synthesis helps mitigate injection risks.
- [EXTERNAL_DOWNLOADS]: The skill's reference documentation provides templates for installing development tools, such as the Go
stresstool from its official repository atgolang.org. These are documented as standard procedures for diagnosing specific language environments.
Audit Metadata