test-framework-migration-skill
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches migration reference documentation and guidelines from LambdaTest's official GitHub repository to guide the code conversion process.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing test code and external documentation to generate new scripts. This creates a potential surface for indirect prompt injection if the source code or remote documentation were to contain malicious instructions.
- Ingestion points: User-provided test scripts (via messages or open files) and external Markdown reference files from the LambdaTest GitHub repository.
- Boundary markers: None explicitly defined in the instructions to separate external data from the system prompt.
- Capability inventory: The skill generates code based on these inputs. It does not explicitly define shell execution or file write tools in its instructions, though the agent environment may provide them.
- Sanitization: No specific sanitization or validation steps are defined for the content processed from external files or user scripts.
Audit Metadata