negative-test-generator
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The documentation file references/negative-path-catalog.md includes a homoglyph (gооgle.com using Cyrillic characters). This is a documented test case for identifying 'Unicode confusables' and is part of the skill's legitimate security testing functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface as it processes code and test inputs to generate new scripts.
- Ingestion points: Reads source code and happy-path tests (e.g., src/importMembers.js).
- Boundary markers: No explicit delimiters are currently required for inputs.
- Capability inventory: Generates and writes test files (e.g., src/importMembers.test.js).
- Sanitization: Recommends using a synthetic-pii-generator and provides guidance on escaping malicious output.
Audit Metadata