qe-regression-testing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CI/CD configuration example includes a reference to
dorny/paths-filter@v2, a well-known GitHub Action used for identifying changed files within a repository. - [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that ingest external data, creating a potential surface for indirect prompt injection.
- Ingestion points: The
selectTestsfunction processes an array ofchangedFiles, and theBug Regression Testtask accepts abugobject containing a description field. - Boundary markers: None are explicitly defined in the provided code snippets to delimit untrusted input.
- Capability inventory: The skill references command execution (
npm run) and multi-agent coordination (FleetManager). - Sanitization: No explicit sanitization or validation logic is shown in the simplified code examples for processing the external file names or bug descriptions.
Audit Metadata