qe-requirements-validation
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate quality engineering operations. All tools and workflows described are consistent with the stated purpose of validating requirements and managing test coverage.
- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection as it ingests and processes external requirements from Jira and project files to generate BDD scenarios.
- Ingestion points: Jira project requirements, user stories, source code files, test files, and documentation referenced in
SKILL.mdand the traceability builder logic. - Boundary markers: No specific delimiters or instructions to ignore embedded malicious instructions within the requirements were identified in the workflow prompts.
- Capability inventory: The skill executes shell commands via the
aqeCLI and writes generated feature files to the local file system. - Sanitization: No explicit sanitization or filtering of external content was found prior to its use in generating scenarios or reports.
Audit Metadata