test
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill constructs and executes shell commands using the Bash tool to perform its primary function of running tests. It dynamically selects package managers and executes scripts defined in the codebase.
- [PROMPT_INJECTION]: The skill incorporates user-supplied input into shell command arguments, creating a surface for potential indirect prompt injection or command injection.
- Ingestion points: User-provided arguments for file patterns or test flags (the
<pattern>variable) are interpolated directly into the bash command string. - Boundary markers: No delimiters or specific instructions are provided to the agent to treat the pattern as literal data or to ignore embedded shell metacharacters.
- Capability inventory: The skill utilizes the Bash tool, which allows for command execution on the underlying environment.
- Sanitization: No validation, escaping, or filtering logic is applied to the user input before it is passed to the shell.
Audit Metadata