test-fix-loop
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage its internal state, including
mkdir,printf, andrmto create and delete marker files in the~/.claude/cooking/directory. - [COMMAND_EXECUTION]: It invokes user-provided test commands (e.g.,
npm test,pytest) and diagnostic tools likegit statusto verify the state of the codebase and the success of attempted fixes. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting failing test code and error output, which could theoretically contain malicious instructions designed to influence the agent's behavior during the fix-and-run cycle.
- Ingestion points: The codebase implementation and the stdout/stderr output from the failing test command (SKILL.md).
- Boundary markers: None explicitly defined for the code content itself, though the loop is strictly bounded by a filesystem marker file and an iteration counter.
- Capability inventory: The skill has the capability to edit files (to fix tests) and execute shell commands (to run tests).
- Sanitization: No specific sanitization or filtering is applied to the code or test output before processing.
Audit Metadata