write-frontend-tests
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands in
SKILL.md(Step 1, Step 3, Step 4, Step 7) to perform git operations, search the filesystem, and run unit tests viapnpm.- [COMMAND_EXECUTION]: User-supplied input fromARGUMENTSis directly assigned to a shell variable (BASE_BRANCH) inSKILL.md(Step 1) and used in agit diffcommand, which is a potential command injection surface if the platform does not provide input sanitization.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes external data from git diffs. - Ingestion points: Git diff output processed in
SKILL.md(Step 1). - Boundary markers: Absent; the agent reads the diff content without specific delimiters to ignore embedded instructions.
- Capability inventory: File system writing in
SKILL.md(Step 6) and shell command execution viapnpm test:unitinSKILL.md(Step 7). - Sanitization: Absent; the skill does not include steps to escape or validate the content of the diffs before using them to generate test code.
Audit Metadata