testing-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to be used by an agent when reviewing, writing, or generating code. This creates an indirect prompt injection surface where the agent processes untrusted code that could potentially contain malicious instructions or data meant to influence the agent's behavior.
- Ingestion points: The skill body in
SKILL.mdandreferences/e2e-testing-rules.mdprovides rules for processing code files and test data. - Boundary markers: The skill does not define specific delimiters or instructions to treat the reviewed code as untrusted data.
- Capability inventory: The skill provides logic and examples but does not include scripts that perform shell execution, file writes, or network requests.
- Sanitization: No explicit sanitization or filtering is performed on the data being reviewed or generated.
Audit Metadata