flaky-test-detective
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a detection script (
detect-flaky-tests.ts) that useschild_process.execSyncto runnpm test. This is a legitimate use for the skill's primary purpose of identifying flaky tests through repeated execution. - [INDIRECT_PROMPT_INJECTION]: The skill defines logic to process test output and error messages to perform root cause analysis.
- Ingestion points: In
detect-flaky-tests.ts, the skill parses the output ofnpm test -- --reporter=json. TheanalyzeTestfunction also ingests error message strings. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are present.
- Capability inventory: The skill has the capability to execute shell commands via
execSync. - Sanitization: The skill uses standard JSON parsing and string searching (
includes) to process test data, which is appropriate for its diagnostic purpose.
Audit Metadata