openclaw-test-performance
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the execution of shell commands such as
pnpmfor testing andscripts/committerfor version control operations. - [REMOTE_CODE_EXECUTION]: It utilizes the
blacksmithCLI to run test suites on remote CI/CD infrastructure. - [EXTERNAL_DOWNLOADS]: The skill uses
pnpm installto manage project dependencies, which involves fetching packages from the npm registry. - [PROMPT_INJECTION]: The agent is instructed to read various local
AGENTS.mdfiles as part of its workflow, representing an indirect prompt injection surface where documentation content could influence agent logic. - Ingestion points: Multiple
AGENTS.mdfiles includingsrc/agents/AGENTS.md,src/channels/AGENTS.md,src/plugins/AGENTS.md,src/gateway/AGENTS.md,test/helpers/AGENTS.md,test/helpers/channels/AGENTS.md, andsrc/infra/outbound/AGENTS.md. - Boundary markers: The instructions do not specify the use of delimiters or sanitization when reading these files.
- Capability inventory: The skill possesses extensive capabilities including file system modification, command execution, and remote job submission.
- Sanitization: No content validation or escaping is applied to the data read from the local documentation files.
Audit Metadata