simready-foundation-add-runtime-test
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is authored by NVIDIA and targets internal project workflows using local paths and workspace-specific tooling. No evidence of malicious intent, data exfiltration, or obfuscation was found.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute specific commands using the
workspace runtime_testsCLI (e.g.,batch_maker,job_runner,report_generator). These are documented as part of the intended runtime testing workflow for the project. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes external configuration and source files which could potentially contain malicious instructions.
- Ingestion points: Test definitions (TOML files) and search functions (source code files) read from the workspace (SKILL.md).
- Boundary markers: Absent. The instructions do not specify using delimiters or 'ignore' instructions when reading these files.
- Capability inventory: The skill executes shell commands via the
workspaceCLI and modifies repository files (SKILL.md). - Sanitization: Absent. There are no explicit validation or sanitization steps mentioned for the content of ingested configuration files.
Audit Metadata