add-eval
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes local source files and existing test files to generate instructions for the eval-test-creator agent. This creates an attack surface where malicious content inside the project files could influence the agent's behavior.
- Ingestion points: Reads source code from
src/umbraco-api/tools/{collection}/index.tsand existing scenarios fromtests/evals/*.test.ts. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the ingested code as untrusted data.
- Capability inventory: The agent can create new test files and execute shell commands via
npmscripts. - Sanitization: No sanitization or validation of the file content is performed before it is used to influence test creation.
- [COMMAND_EXECUTION]: The skill instructs the agent to run
npm run buildandnpm run test:evals. These are standard development operations but execute code based on local configurations.
Audit Metadata