create-handover-test
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx playwright testto verify the functionality of newly created test files. This is a standard and expected operation for an automated testing tool. - [COMMAND_EXECUTION]: The skill generates TypeScript code based on external ticket descriptions and subsequently executes it. This creates a surface for indirect prompt injection where malicious content in a ticket might influence the generated code.
- Ingestion points: Ticket key and description parsed from user input as described in
SKILL.md. - Capability inventory: Writing files to
e2e/tests/handover/and executing shell commands inSKILL.md. - Boundary markers: None identified in the provided templates.
- Sanitization: No explicit validation or escaping of ticket content is mentioned in the workflow.
Audit Metadata