testing-expert
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via the Bash tool to automate testing tasks, including identifying configuration files and running test suites using
npmandnpx. This behavior is expected and necessary for its function as a testing expert assistant.\n- [PROMPT_INJECTION]: (Indirect Surface) The skill processes project-specific data to determine its strategy, which constitutes an indirect prompt injection surface.\n - Ingestion points: The skill reads content from
package.jsonand scans the filesystem for*.test.*and*.spec.*files.\n - Boundary markers: None are present; the skill identifies framework and file patterns directly from project files.\n
- Capability inventory: The skill has access to shell command execution (
Bash), file modification (Edit), and directory traversal tools (Read,Glob,Grep).\n - Sanitization: The skill executes existing project scripts (e.g.,
npm test) and uses tool output for analysis without additional sanitization, which is typical for developer tools but relies on the integrity of the local environment.
Audit Metadata