The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill generates executable TypeScript test files by concatenating strings with data extracted from route definitions. These files are then written to the local filesystem using fs.writeFileSync in the scripts/test-gen.ts script. While this is the intended functionality of a test generator, it involves the creation of executable content at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect injection because it ingests external data (project route definitions) and interpolates it directly into code templates without sanitization or escaping. An attacker who can influence the route definitions (e.g., through a malicious pull request) could inject arbitrary code into the generated test files. 1. Ingestion points: The scanRoutes function in scripts/test-gen.ts reads route definitions from the project source directory. 2. Boundary markers: None are present in the code generation logic to delimit or validate the injected route metadata. 3. Capability inventory: The skill has the ability to write files to disk (fs.writeFileSync) and define test logic that will be executed by a test runner. 4. Sanitization: There is no evidence of sanitization or character escaping for fields like route.path or route.method before they are placed into code strings.

api-test-suite-generator