insta-snapshots

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell commands for running tests and managing snapshots using cargo and cargo-insta. These are standard development tools and are used appropriately within the stated context of the Oxc codebase.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and review .snap.new files, which are external files generated by test runs. While this presents an ingestion surface for untrusted data, the skill includes explicit advice to "Always review snapshots manually" and the commands are limited to standard testing utilities.
  • Ingestion points: .snap.new files (referenced in SKILL.md).
  • Boundary markers: None explicitly defined for the file content itself.
  • Capability inventory: cargo test, cargo insta, git diff (referenced in SKILL.md).
  • Sanitization: None detected for snapshot content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 04:29 PM