testany-import-git
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external Git repositories via browsing and file preview tools, which could potentially contain instructions aimed at influencing the agent's behavior.
- Ingestion points: Untrusted content is ingested through the
testany_browse_git_treeandtestany_preview_git_filetools as described in SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the ingested data.
- Capability inventory: The skill has the capability to create import records, manage webhook configurations, and handle OAuth connections via its toolset.
- Sanitization: There is no evidence of explicit sanitization or validation of the repository content before it is processed by the agent.
Audit Metadata