fake-clock-testing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for several third-party testing libraries including freezegun (Python), @sinonjs/fake-timers (JavaScript), timecop (Ruby), and libfaketime (native). These are standard tools sourced from well-known community repositories.
- [DYNAMIC_EXECUTION]: The documentation for libfaketime details the use of LD_PRELOAD to intercept system-level time calls. While LD_PRELOAD is a powerful injection mechanism, it is presented here solely for its intended purpose of mocking time in native binaries.
- [PRIVILEGE_ESCALATION]: Setup instructions for libfaketime include the use of sudo apt install, which is the standard method for installing system packages on Debian-based Linux distributions.
- [INDIRECT_PROMPT_INJECTION]: The evaluation tasks in the evals/ directory ingest code snippets and configuration data as Input Files. This represents a data ingestion surface. Evidence chain: (1) Ingestion points: Input Files section in all task.md files; (2) Boundary markers: Absent; (3) Capability inventory: Writing generated test files to the local file system; (4) Sanitization: Absent.
Audit Metadata