senior-qa
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs its primary function of test automation and coverage analysis using standard Python libraries. The code is well-structured, follows professional engineering patterns, and does not contain hidden or malicious functionality.
- [DYNAMIC_EXECUTION]: The skill uses Python scripts to generate TypeScript and JavaScript test files from templates. This script generation is a core feature for scaffolding Jest and Playwright tests. The generation logic is safe as it relies on pre-defined templates and restricted parsing of component and route names.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided source code and coverage data to inform test generation. This data ingestion is handled locally and is used only to populate test templates. The tools include regex-based validation for identifiers like component names, which serves as a safeguard against malicious content in the processed files influencing the generated code.
Audit Metadata