parallel-test-fixing
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npm testto identify failing test files and to verify fixes. This is standard behavior for a developer tool.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes test failure logs which are then passed to subagents. - Ingestion points: Test error logs from the
npm testcommand (SKILL.md). - Boundary markers: Absent; the failure output is directly interpolated into the subagent task description without delimiters or warnings.
- Capability inventory: Subagents (generalPurpose) have the ability to read and modify source code and execute shell commands.
- Sanitization: None; the skill does not sanitize or validate the content of the error logs before passing them to the subagent.
Audit Metadata