wms-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected in the skill instructions, scripts, or metadata. The skill serves a legitimate purpose for enterprise QE testing of warehouse software platforms.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing external data streams, creating an attack surface for indirect injection via manipulated business documents or hardware inputs.
- Ingestion points: The skill instructions (SKILL.md) describe processing external EDI documents (X12/EDIFACT) and RF barcode scanning data.
- Boundary markers: No specific delimiters or safety instructions are provided to isolate external document content from the agent's control flow.
- Capability inventory: The skill coordinates with specialized validation agents (e.g., qe-contract-validator) rather than utilizing generic shell execution or wide-scope network tools.
- Sanitization: The patterns prioritize business logic and syntax validation of the inbound data without explicit sanitization of potential instruction-carrying content.
Audit Metadata