testing-integration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax (
!command) inscripts/create-integration-test.mdto perform local project reconnaissance. It executes benign commands likegrepandfindto detect the existing test framework, API clients, and database environment. This information is used to automatically populate the 'Test Context' in generated test templates. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves creating integration tests that process data from external APIs and user-provided component inputs, creating an indirect prompt injection surface. The skill proactively addresses this risk by enforcing the use of Zod schemas and
.safeParse()for runtime validation at all system boundaries. - [EXTERNAL_DOWNLOADS]: The skill documentation correctly links to official documentation for Pact and GitHub Actions. All referenced libraries (e.g., Pact, Testcontainers, Vitest) are well-known, industry-standard tools within the testing ecosystem.
Audit Metadata