qe-shift-left-testing

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as user stories and requirements during its orchestration flow.
  • Ingestion points: userStories, requirements, and prFiles are passed to specialized agents (qe-requirements-validator, qe-test-generator, qe-regression-risk-analyzer) in SKILL.md.
  • Boundary markers: The orchestration examples do not include explicit delimiters or instructions to ignore embedded prompts in the processed data.
  • Capability inventory: The skill initiates tasks for requirements validation, automated test generation, and regression risk analysis across multiple agents.
  • Sanitization: No explicit sanitization or validation of the input strings is demonstrated in the provided orchestration snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:15 PM
Security Audit — agent-trust-hub — qe-shift-left-testing