testing-integration

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax (!command) in scripts/create-integration-test.md to perform local project reconnaissance. It executes benign commands like grep and find to detect the existing test framework, API clients, and database environment. This information is used to automatically populate the 'Test Context' in generated test templates.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves creating integration tests that process data from external APIs and user-provided component inputs, creating an indirect prompt injection surface. The skill proactively addresses this risk by enforcing the use of Zod schemas and .safeParse() for runtime validation at all system boundaries.
  • [EXTERNAL_DOWNLOADS]: The skill documentation correctly links to official documentation for Pact and GitHub Actions. All referenced libraries (e.g., Pact, Testcontainers, Vitest) are well-known, industry-standard tools within the testing ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:32 AM