testing-code
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill uses standard testing frameworks and tools. The provided examples and instructions follow industry best practices for quality assurance and test-driven development.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because its core function involves reading and analyzing external project source code.
- Ingestion points: The skill is instructed to use
Read,Grep, andGlobtools to analyze code for test generation and improvement. - Boundary markers: No specific instructions for using XML delimiters or "ignore embedded instructions" headers are provided for the code ingestion process.
- Capability inventory: The skill has the ability to modify the filesystem (
Write,Edit) and execute shell commands (Bash). - Sanitization: There are no instructions for the agent to sanitize or validate the content of the files it reads before processing them.
- [COMMAND_EXECUTION]: The skill contains examples and instructions for running shell commands using the
Bashtool, specifically for executing test runners and coverage tools such aspytestandcoverage.py. These operations are limited to the intended purpose of the skill.
Audit Metadata