post-dev-test
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the conversation history during Phase 1 to identify developed features and API endpoints for test generation. This represents an indirect prompt injection surface where instructions embedded in processed data could potentially influence the agent's actions.
- Ingestion points: Conversation history (SKILL.md, Phase 1).
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill utilizes
Writefor file creation andBashfor command execution. - Sanitization: No explicit sanitization or validation of the ingested context is mentioned before it is used to determine test strategy and content.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executeyarn jestcommands for running integration and E2E tests. While this is the primary purpose of the skill, it involves the execution of shell commands in the local environment. - [DYNAMIC_EXECUTION]: The skill follows a workflow of programmatically writing TypeScript test files to the file system (using templates in
references/test-patterns.md) and subsequently executing them using theBashtool.
Audit Metadata