test-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is configured to use the
run_in_terminaltool to executepnpm testand file-specific test commands. This is the primary intended function of the skill and aligns with its metadata. - [PROMPT_INJECTION]: The skill presents an inherent surface for indirect prompt injection due to its requirement to read and process untrusted project source code.
- Ingestion points: Source code and configuration files read via
read_file(SKILL.md). - Boundary markers: None present. The agent is not explicitly instructed to ignore instructions found within the code it reads.
- Capability inventory: Terminal execution (
run_in_terminal) and file creation (create_file). - Sanitization: No sanitization or validation of the ingested content is specified.
Audit Metadata