generating-unit-tests
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line utilities to identify files to be tested (
git diff), verify installed developer tools (npm ls), and execute test suites (npx jest,npx vitest,npx playwright,npx mocha). These operations are routine for a development-focused agent. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external source code to generate unit tests. This ingestion of untrusted data represents a potential attack surface, though it is necessary for the skill's primary function and is mitigated by standard agent guardrails.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation for well-known testing frameworks and suggests installing standard, recognized packages through the npm registry.
Audit Metadata