driver-test-runner
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute shell commands for building the project (pnpm build), running Vitest tests (pnpm test), and starting a local engine script (./scripts/run/engine-rocksdb.sh). These are standard development operations for the RivetKit repository. - [INDIRECT_PROMPT_INJECTION]: The skill reads from a local file (
~/.agents/notes/driver-test-progress.md) to determine test status and decide which commands to execute next. This behavior creates a vulnerability surface where manipulated file content could influence future shell commands. - Ingestion points: The progress file
~/.agents/notes/driver-test-progress.mdis read to track completion status. - Boundary markers: Absent. No specific delimiters or "ignore instructions" warnings are defined for the data read from the progress file.
- Capability inventory: The skill has access to
Bashfor command execution andWrite/Editfor state management. - Sanitization: Absent. The runner interpolates text from the progress file (file names and suite descriptions) into shell command strings without explicit validation or escaping.
Audit Metadata