enterprise-integration-testing
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides templates and instructions for enterprise integration testing across multiple systems. It utilizes legitimate client libraries for SAP and web APIs and follows standard end-to-end testing practices. No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscation were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting data from external enterprise systems (SAP, WMS, CRM) to drive subsequent testing steps.
- Ingestion points: Data is ingested through
sapClient.call,wmsApi.get,crmApi.get, andodataClient.getcalls inSKILL.mdto validate cross-system consistency. - Boundary markers: The code snippets do not utilize specific delimiters or prompt boundary markers to isolate data fetched from external systems.
- Capability inventory: The skill possesses capabilities for network communication (HTTP POST/GET) and SAP function execution (BAPI/RFC calls) as part of the testing flows.
- Sanitization: No explicit sanitization or validation of the data received from external systems is demonstrated before it is used in further test logic, which is standard for testing automation.
Audit Metadata