testing-flow
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and metadata were analyzed, and no evidence of malicious intent, data exfiltration, or unauthorized command execution was found.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to process external requirements and project code:
- Ingestion points: The skill ingests untrusted data from project requirements (e.g., Jira stories), project directory structures, and existing test files (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the ingested data.
- Capability inventory: The skill orchestrates other tools capable of performing file system writes (writing/fixing autotests) and network operations (syncing test cases with Testomat.io).
- Sanitization: No explicit sanitization or input validation mechanisms for processed requirements or code are documented in this orchestrator.
Audit Metadata