test-generator
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local source code to generate test suites, which presents a surface for indirect prompt injection if the input code contains malicious instructions.\n
- Ingestion points: Local source files read during the analysis phase.\n
- Boundary markers: Absent.\n
- Capability inventory: File system write (test generation) and shell command execution (test runners).\n
- Sanitization: Absent.\n- [DYNAMIC_EXECUTION]: The skill generates and executes test scripts (e.g., .test.ts, test_*.py) using frameworks like Vitest and Pytest. This is the core intended functionality for providing test coverage.\n- [COMMAND_EXECUTION]: The skill executes shell commands to detect project configurations (e.g., cat package.json) and to run test coverage reports (e.g., npx vitest run --coverage). These commands are standard for the development workflow described.
Audit Metadata