cpp-testing
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the GoogleTest framework from the official Google GitHub repository using CMake's FetchContent module. This is a standard dependency management practice targeting a trusted organization.
- [COMMAND_EXECUTION]: Provides commands for building projects with CMake, running tests with CTest, and using standard diagnostic tools like lcov and llvm-cov.
- [PROMPT_INJECTION]: The skill processes external source files and test data, creating a potential surface for indirect prompt injection.
- Ingestion points: Workflow involves reading C++ source files and test data (e.g.,
tests/testdataas mentioned in SKILL.md). - Boundary markers: Relies on standard delimiters for code and does not include specific markers or warnings for untrusted content.
- Capability inventory: Includes capabilities to compile source code via
cmakeand execute the resulting binaries viactestor direct invocation. - Sanitization: No explicit sanitization or validation of the ingested file content is specified.
Audit Metadata