test-fixing
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands such as
make testanduv run pytestto identify and verify code fixes. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it processes and relies on output from tests that may contain untrusted data.
- Ingestion points: The agent ingests terminal output from the
make testandpytestexecution cycles. - Boundary markers: No boundary markers or delimiting instructions are used to distinguish test output from agent instructions.
- Capability inventory: The agent is granted file-writing capabilities through an Edit tool and shell execution capabilities for tests and git commands.
- Sanitization: No sanitization or validation of test results is performed before analysis.
Audit Metadata