testing-strategies
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No security issues detected across the 15 analyzed files. The skill consists of educational markdown documentation and Python/Bash scripts designed to assist with test generation and coverage reporting.
- [COMMAND_EXECUTION] (LOW): The
scripts/test-runner.shandscripts/report-generator.shscripts involve command execution. Specifically,test-runner.shinvokes standard development tools likepytest,npm,pylint, andblack. This behavior is entirely consistent with the skill's primary purpose as a testing utility and does not exhibit malicious intent. - [DATA_EXPOSURE] (SAFE): Analysis of the scripts (
coverage-analyzer.py,test-generator.py) shows they perform local file reads to parse coverage data and extract function signatures for test skeleton generation. No sensitive file paths are targeted, and no network exfiltration was found. - [PROMPT_INJECTION] (SAFE): The
SKILL.mdandREADME.mdfiles contain natural instructional language and code examples related to software testing. No attempts to override agent behavior or bypass safety filters were identified.
Audit Metadata