acceptance-testing
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to extract Given/When/Then acceptance criteria from specification files to drive test creation and validation gates. If these specification files are sourced from an untrusted party, they could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Specification files located in
specs/*.mdaccessed during Phase 1. - Boundary markers: The instructions lack specific delimiters or instructions to treat the specification content as data rather than instructions (e.g., no 'ignore embedded instructions' warnings).
- Capability inventory: The skill facilitates the execution of test runners, build tools, linters, and end-to-end testing frameworks (Playwright) based on the derived criteria.
- Sanitization: No sanitization, escaping, or validation steps are prescribed for the content extracted from the specification files before it is interpolated into the testing and validation workflow.
Audit Metadata