wjttc-tester
Warn
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
faf-clitool to perform auditing and scoring tasks. Commands includefaf wjttc,faf wjttc --strict --json, andfaf score --json. - [PERSISTENCE]: The skill provides instructions to create a persistent GitHub Actions workflow file. The command
faf taf setup --writeis used to generate.github/workflows/taf.yml, enabling automated code execution within the project's CI/CD environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as bug reproduction steps and test plans, which could be used to inject malicious instructions.
- Ingestion points: Test plans, edge case definitions, and bug reproduction steps as described in the execution loop of
SKILL.md. - Boundary markers: Absent; no specific delimiters or instructions to ignore embedded commands in the processed data are provided.
- Capability inventory: Includes shell command execution through
faf-cliand the ability to modify sensitive repository configuration files like CI workflows. - Sanitization: Absent; the skill does not specify any validation, escaping, or filtering of input data before processing.
Audit Metadata