skills/poteto/noodle/testing/Gen Agent Trust Hub

testing

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard local development tools including pnpm, go test, and a project-specific script ./scripts/scaffold-fixture.sh to manage tests and fixtures. These operations are consistent with the skill's primary purpose of code verification and maintenance.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it reads and processes data from local fixture files which could be modified by external actors in a collaborative environment.
  • Ingestion points: Ingests data from input.json, input.ndjson, and expected.md located in the testdata/ directory (referenced in references/fixtures.md).
  • Boundary markers: Uses YAML frontmatter delimiters (---) and Markdown headers (##) to structure and isolate data sections within expected.md files.
  • Capability inventory: The agent can execute shell commands via pnpm and go test and perform git commits using Skill(commit) (documented in SKILL.md).
  • Sanitization: No explicit sanitization or content validation for the fixture files is mentioned in the instruction files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 01:17 AM