pytest-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The
auth_clientfixture example inSKILL.mdincludes a hardcoded password ("AdminPass123!") for a mock authentication test. While intended for local testing education, hardcoded credentials in instructional code are a potential security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function creates a surface for indirect prompt injection.\n - Ingestion points: The skill ingest user-provided Python code to perform writing, debugging, or reviewing tasks.\n
- Boundary markers: The skill does not define specific boundaries or ignore-instructions for the untrusted code.\n
- Capability inventory: The skill utilizes
pytestfor test execution and interacts with the file system via fixtures liketmp_path.\n - Sanitization: No input validation or sanitization is provided for the code snippets.\n- [EXTERNAL_DOWNLOADS]: The skill mentions installing well-known testing plugins (pytest-mock, pytest-xdist, pytest-randomly) from the official Python package registry.
Audit Metadata