test-documentation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on legitimate QA workflows, specifically analyzing, prioritizing, and documenting test cases. All operations are conducted through abstract tools like [ISSUE_TRACKER_TOOL] and [TMS_TOOL], which map to standard CLI utilities (acli, xray-cli).
- [CREDENTIALS_SAFE]: The skill promotes secure credential management by instructing the user to store Atlassian and Xray API secrets in a .env file rather than hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it reads information from Jira tickets to generate documentation. While this is a potential vector for indirect prompt injection, it is the primary function of the skill and is mitigated by the use of structured Gherkin and markdown templates. Ingestion points: Jira ticket fields (Description, ACs, comments) synced to the .context/PBI/ directory. Boundary markers: Markdown headers and Gherkin keyword structures. Capability inventory: Issue creation, linking, and status transitions via standard CLI tools. Sanitization: Data is processed into specific templates and undergoes a source-code validation phase.
Audit Metadata