testing
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze project source code, terminal outputs, and test results, which constitutes an untrusted data ingestion surface where malicious content in a repository could attempt to influence the agent.
- Ingestion points:
PROJECT-VERIFICATION.md,CLI-HARNESS.md, andINTEGRATION.mddescribe reading repository files, startup logs, and terminal transcripts as part of the testing workflow. - Boundary markers: No specific delimiters or instruction-isolation markers are mandated for the data being analyzed.
- Capability inventory: The skill leverages terminal harnesses (
tmux,PTY), test runners (vitest), and containerized infrastructure management (testcontainers). - Sanitization:
PROJECT-VERIFICATION.mdincludes explicit instructions to "Keep secrets out of definitions and artifacts." - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands and the management of terminal environments to perform project verification.
- Evidence:
CLI-HARNESS.mdprovides instructions for driving interactive terminal sessions withtmuxandPTYdrivers.INTEGRATION.mdincludes TypeScript code for orchestrating Docker containers using the@testcontainers/postgresqllibrary.
Audit Metadata