ai-test-generation
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, such as product requirements, user stories, and bug reports, to drive the test generation pipeline. While this presents a surface for indirect prompt injection, the risk is mitigated by a mandatory human review step and the requirement for structured intermediate documents like a Coverage Matrix. These steps ensure that any potentially malicious instructions in the input are identified before they can influence the final test code.
- [DYNAMIC_EXECUTION]: The skill is designed to generate executable test scripts based on analyzed specifications. This is conducted within a controlled framework that adheres to project-specific conventions and relies on established Page Object Models and fixtures. The mandatory human-in-the-loop checkpoint before merging code integration ensures that the generated content is safe and functional.
Audit Metadata