qa-testing
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external web pages during QA audits, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Data is gathered from web pages using DOM-querying JavaScript snippets defined in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or warnings to treat extracted content as untrusted data.
- Capability inventory: The agent is tasked with generating Markdown reports using the ingested data via the provided template.
- Sanitization: No sanitization or filtering of the extracted web content is implemented before it is interpolated into the final report.
- [DYNAMIC_EXECUTION]: The skill provides pre-defined JavaScript templates intended to be executed in a browser's developer console to inspect and extract page data.
Audit Metadata