sync-test-cases-with-tms
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use 'npx check-tests@latest' to download and run the Testomat.io CLI. This is an official vendor tool fetched from a well-known package registry.
- [COMMAND_EXECUTION]: The skill relies on shell commands to execute the 'check-tests' CLI for synchronizing test scenarios between the local environment and the TMS.
- [INDIRECT_PROMPT_INJECTION]: The skill downloads test case data from an external platform into local Markdown files. Ingestion points: Test scenarios are pulled from Testomat.io and saved as local files (e.g., in '.testeiya/test-cases/'). Boundary markers: The skill does not provide specific instructions or delimiters to isolate the pulled content or warn the agent about potentially embedded instructions. Capability inventory: The skill allows the agent to execute shell commands, read/write local files, and access API tokens in '.env' files. Sanitization: There is no mention of validating or sanitizing the content of the pulled test scenarios before the agent processes them.
Audit Metadata