shift-left-testing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local tools like
bunfor data synchronization (bun run jira:sync-issues) and local context mapping. These are standard development workflows for the upex-galaxy vendor. - [DATA_EXPOSURE]: The skill reads from local
.envfiles for credentials and.agents/configuration directories. This follows the vendor's standard practice for secret management and project configuration. - [EXTERNAL_DOWNLOADS]: The skill uses
bun syncto ensure local business context skills are present. These are internal project dependencies from the same vendor scope. - [PROMPT_INJECTION]: No evidence of instructions attempting to bypass safety filters or override agent constraints was found. The instructions are strictly focused on QA refinement logic.
- [DYNAMIC_CONTEXT_INJECTION]: No use of shell execution via the
!commandsyntax was detected in SKILL.md.
Audit Metadata