code-permutation-testing
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions in
SKILL.mdsuggest installing well-known testing utilitiescargo-mutantsandmutmutusing standard package managers. - [COMMAND_EXECUTION]: The skill workflow involves executing shell commands for mutation testing and running local Python scripts for test generation, which is appropriate for its stated purpose.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing user-provided function signatures to generate test code. 1. Ingestion points:
scripts/generate_boundaries.pyaccepts function signatures via the--funcparameter. 2. Boundary markers: None identified. 3. Capability inventory: The skill performs shell command execution for testing and generates code snippets. 4. Sanitization: Input is parsed using regular expressions, though resulting strings are interpolated into test templates.
Audit Metadata