test-engineer
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
run_in_terminaltool to executepnpm testand other developer-initiated commands. While necessary for its intended purpose, this provides a mechanism for arbitrary command execution on the host system. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.
- Ingestion points: The agent is instructed to read source code using the
read_filetool to 'understand logic branches'. - Boundary markers: No explicit delimiters or instructions to ignore malicious embedded content within the analyzed files are provided.
- Capability inventory: The skill possesses high-privilege tools including
run_in_terminal(command execution) andcreate_file(file-system writes). - Sanitization: There is no evidence of content sanitization or validation of the data retrieved from external project files.
Audit Metadata