foundry-agent-test
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
tdxcommand-line tool, which is the official CLI provided by Treasure Data. The commands documented (e.g.,tdx agent test) are standard operations for agent lifecycle management and testing within the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill defines a testing workflow that ingests data from
test.ymlfiles to simulate agent conversations. This presents a theoretical indirect prompt injection surface if an attacker can influence the contents of the test definitions. - Ingestion points: The
user_inputandcriteriafields intest.ymlare loaded and processed by the testing tool. - Boundary markers: The documentation does not describe specific delimiters or instructions used to separate test inputs from system instructions during execution.
- Capability inventory: The skill facilitates the execution of agent conversations and evaluation of responses using the
tdxCLI. - Sanitization: No explicit sanitization or validation mechanisms for the YAML content are described in the instructions.
Audit Metadata