quality-test

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting data from project-level files and interactive user input to generate test cases and drive remediation loops.
  • Ingestion points: Data is sourced from verification.json, validation.json, and .summaries/TASK-*.md in Step 4, as well as descriptive user feedback in Step 7.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the ingested content.
  • Capability inventory: The skill possesses significant capabilities, including file modification (Write/Edit), shell command execution (Bash), and the ability to spawn sub-agents (Agent tool).
  • Sanitization: There is no evidence of content validation or escaping before interpolation into agent prompts or execution plans.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool for project file discovery in Step 2 and to execute build and sanity checks during the smoke testing phase in Step 3.
  • [COMMAND_EXECUTION]: In Step 12, the skill implements a 'gap-fix loop' that plans and executes automated fixes, which involves dynamic execution of commands based on LLM-generated plans derived from project state.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 01:12 AM