testing-verification
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions are focused on standard software quality assurance tasks, such as discovering test commands, creating regression tests, and verifying UI changes. It does not contain any suspicious code, obfuscation, or unauthorized network activity.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the user's project environment, including documentation and existing test files, to formulate its strategy. This represents a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Reads project-specific files like
AGENTS.md,CLAUDE.md, business documentation, and existing source code files in the repository. - Boundary markers: The instructions do not define specific delimiters or warnings to disregard instructions found within the processed project files.
- Capability inventory: The skill is intended to execute shell commands for running tests (e.g.,
pytest,npm test) and can interact with browser automation tools like Playwright. - Sanitization: There is no mention of sanitizing or filtering the content of ingested files before they are processed by the agent.
Audit Metadata