pytest-skill
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation and code snippets for Python testing using pytest. No malicious code, obfuscation, or exfiltration patterns were identified across the 11 threat categories.
- [EXTERNAL_DOWNLOADS]: The skill mentions community-standard testing libraries (
pytest,pytest-mock,pytest-asyncio,pytest-cov,pytest-xdist) for installation. These are well-known packages in the Python testing ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by instructing the agent to generate code based on user-provided application details.
- Ingestion points: User prompts containing keywords like "pytest", "conftest", or requests for Python test generation (SKILL.md).
- Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore embedded instructions in user data.
- Capability inventory: The agent may generate and write file content or execute shell commands for running tests.
- Sanitization: None specified within the skill instructions, relying on general agent guardrails.
Audit Metadata