prowler-test-api
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard command-line instructions for running unit and integration tests using
uv run pytest. These commands are scoped to the local development environment and are intended for executing the provided test suite. - [CREDENTIALS_UNSAFE]: The skill includes a specific security rule (Section 5) that instructs developers to avoid using realistic API keys in tests to prevent accidental credential leakage or false positives in security scanners. It demonstrates the use of clearly marked fake keys for testing purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a template for generating and writing test code. While it processes data into agent instructions, it does not ingest untrusted external content that could influence agent behavior beyond the intended scope of API testing.
Audit Metadata