local-service-testing
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use standard local development tools to verify code changes. This includes orchestrating services with
docker-compose, running tests viapnpm,pytest, orgo test, and verifying connectivity with CLI tools likepsqlandredis-cli. These operations are well-scoped to local development and testing purposes. - [INDIRECT_PROMPT_INJECTION]: The skill has a defined surface for processing local data.
- Ingestion points: Files in the local repository including
SKILL.md,docker-compose.yml,.env.example, and the output ofgit diff. - Boundary markers: The skill explicitly requires the use of markdown comment delimiters (
<!-- LOCAL-TESTING:START -->and<!-- LOCAL-TESTING:END -->) when generating artifacts to be posted to external trackers. - Capability inventory: Execution of standard build tools and service clients (
docker-compose,pnpm,pytest,go test,psql,redis-cli). - Sanitization: No specific sanitization logic is defined for the ingested file contents, but the use of explicit boundary markers for output provides a safety layer.
Audit Metadata