insta-snapshots
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several shell commands for running tests and managing snapshots using
cargoandcargo-insta. These are standard development tools and are used appropriately within the stated context of the Oxc codebase. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and review
.snap.newfiles, which are external files generated by test runs. While this presents an ingestion surface for untrusted data, the skill includes explicit advice to "Always review snapshots manually" and the commands are limited to standard testing utilities. - Ingestion points:
.snap.newfiles (referenced inSKILL.md). - Boundary markers: None explicitly defined for the file content itself.
- Capability inventory:
cargo test,cargo insta,git diff(referenced inSKILL.md). - Sanitization: None detected for snapshot content.
Audit Metadata