testing-strategies

Pass

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No security issues detected across the 15 analyzed files. The skill consists of educational markdown documentation and Python/Bash scripts designed to assist with test generation and coverage reporting.
  • [COMMAND_EXECUTION] (LOW): The scripts/test-runner.sh and scripts/report-generator.sh scripts involve command execution. Specifically, test-runner.sh invokes standard development tools like pytest, npm, pylint, and black. This behavior is entirely consistent with the skill's primary purpose as a testing utility and does not exhibit malicious intent.
  • [DATA_EXPOSURE] (SAFE): Analysis of the scripts (coverage-analyzer.py, test-generator.py) shows they perform local file reads to parse coverage data and extract function signatures for test skeleton generation. No sensitive file paths are targeted, and no network exfiltration was found.
  • [PROMPT_INJECTION] (SAFE): The SKILL.md and README.md files contain natural instructional language and code examples related to software testing. No attempts to override agent behavior or bypass safety filters were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 21, 2026, 07:02 AM