pytest-config

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The module modules/git-testing-fixtures.md defines a GitRepository class that utilizes subprocess.run to perform git operations like init, config, and commit. This is standard functionality for the skill's primary purpose of providing test infrastructure.
  • [EXTERNAL_DOWNLOADS]: The modules/ci-integration.md file contains GitHub Actions workflow templates that reference official actions from the actions organization and the well-known codecov service. These are trusted sources for CI/CD pipelines.
  • [PROMPT_INJECTION]: The skill defines test data fixtures that could be exploited if malicious content is placed within them and processed by an agent without sanitization. Ingestion points: Fixtures such as sample_skill_frontmatter in modules/conftest-patterns.md return raw strings used in tests. Boundary markers: No explicit delimiters or instructions to ignore embedded content are present in the provided templates. Capability inventory: subprocess.run calls are located in modules/git-testing-fixtures.md. Sanitization: No sanitization or validation of the fixture data is performed within the templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 01:25 AM