observability-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts using
node(e.g.,.claude/skills/qe-browser/scripts/assert.js) and utilizesvibiumfor browser-based dashboard validation. These executions are limited to local paths and are standard operations for quality engineering and monitoring validation tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from various external sources including Elasticsearch indices, SQL databases, and Prometheus metrics. This involves a theoretical surface for indirect prompt injection if external data sources were to contain malicious instructions. However, the risk is mitigated as the skill uses this data for programmatic assertions (e.g., metric comparisons) rather than direct instruction processing.
- Ingestion points: Data is ingested from Elasticsearch (
esClient.search), databases (db.query), and monitoring APIs inSKILL.md. - Boundary markers: The patterns do not include specific delimiters to isolate external data from instructions.
- Capability inventory: The skill uses tools for browser automation (
vibium), local script execution (node), and network requests (httpClient,jaegerClient). - Sanitization: Data is parsed as numeric or structured values for validation purposes, which acts as a form of implicit sanitization for the intended logic.
Audit Metadata