detect-duplicate-test-cases
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behavior, data exfiltration, or unauthorized persistence mechanisms were identified. All operations are consistent with the skill's stated purpose of test suite maintenance.
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it processes untrusted test case data (Markdown, Gherkin, and JavaScript/TypeScript test files). This is a low-risk concern inherent to the skill's functionality.
- Ingestion points: Local project test files found via file discovery.
- Boundary markers: None specified in the instructions.
- Capability inventory: Reading files, deleting files, and modifying file contents to perform merge operations.
- Sanitization: No explicit content sanitization described.
- [COMMAND_EXECUTION]: The workflow suggests using standard shell tools like
findto discover test files within the repository structure, which is a routine and safe capability for an AI agent.
Audit Metadata