test-pyramid-balancer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by scanning and reading the contents of files within the local repository to classify tests.
- Ingestion points: The
scripts/test-mix-inventory.pyscript usesPath('.').rglob('*')andpath.read_text()to process all files in the repository. - Boundary markers: The skill does not employ explicit delimiters or instructions to ignore embedded prompts within the processed files.
- Capability inventory: The skill leverages
npm testandnpx playwright testfor runtime measurements. - Sanitization: No sanitization is performed on the file content before it is analyzed for heuristic patterns like
test(,it(, ordef test_. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
npm test,npx playwright test) to measure test runtimes. While these are standard developer workflows, they involve executing code derived from the local environment and project configuration.
Audit Metadata