write-frontend-tests

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands in SKILL.md (Step 1, Step 3, Step 4, Step 7) to perform git operations, search the filesystem, and run unit tests via pnpm.- [COMMAND_EXECUTION]: User-supplied input from ARGUMENTS is directly assigned to a shell variable (BASE_BRANCH) in SKILL.md (Step 1) and used in a git diff command, which is a potential command injection surface if the platform does not provide input sanitization.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes external data from git diffs.
  • Ingestion points: Git diff output processed in SKILL.md (Step 1).
  • Boundary markers: Absent; the agent reads the diff content without specific delimiters to ignore embedded instructions.
  • Capability inventory: File system writing in SKILL.md (Step 6) and shell command execution via pnpm test:unit in SKILL.md (Step 7).
  • Sanitization: Absent; the skill does not include steps to escape or validate the content of the diffs before using them to generate test code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 08:11 AM