parallel-test-fixing
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local shell commands to execute test suites and verify fixes. Evidence: Shell blocks in SKILL.md executing npm test -- --no-coverage 2>&1 || true and npm test.
- [INDIRECT_PROMPT_INJECTION]: The skill captures and processes test failure logs which represents a potential attack surface for indirect prompt injection. 1. Ingestion points: The skill parses STDOUT and STDERR from Jest, Vitest, and Pytest runners. 2. Boundary markers: Failure output is interpolated directly into subagent task descriptions without specific markers or safety instructions. 3. Capability inventory: The skill and its subagents have the ability to read and write source files and execute local commands. 4. Sanitization: The skill does not perform sanitization on the error output before passing it to the subagents. Note: This risk is considered inherent to the skill's primary function of fixing code based on test failures.
Audit Metadata