property-based-test-generator
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs widely-used testing libraries including
hypothesis,pytest,fast-check, andQuickCheckusing official package managers (pip, npm, cabal) from their respective public registries. - [COMMAND_EXECUTION]: The skill uses
Bashto perform environment discovery (checking for configuration files likepackage.jsonorpytest.ini) and to execute package installation commands. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data:
- Ingestion points: Reads source code and configuration files via the
ReadandGlobtools to identify testing requirements and function properties. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following malicious instructions hidden in code comments or strings within the files it reads.
- Capability inventory: The agent has access to
Bash(command execution) andWrite(file creation) tools which could be targeted by an injection attack. - Sanitization: No explicit sanitization or filtering is performed on the content ingested from the project files before it influences the generated output or shell commands.
Audit Metadata