contract-testing
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely informational, providing a framework for senior QA engineers to apply contract testing principles. No malicious patterns, code execution, or data exfiltration mechanisms were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a placeholder for user-supplied input via the
$ARGUMENTSvariable in the Context section. - Ingestion points: User input is interpolated into the prompt in
SKILL.mdwithin the# Contextsection. - Boundary markers: No explicit delimiters or boundary markers are used to encapsulate the user input.
- Capability inventory: The skill does not define or use any tools, shell commands, file operations, or network requests.
- Sanitization: No input validation or sanitization logic is present.
- Assessment: While the skill accepts external input, it lacks any exploitable capabilities, rendering the injection surface benign.
Audit Metadata