testing
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard local development tools including
pnpm,go test, and a project-specific script./scripts/scaffold-fixture.shto manage tests and fixtures. These operations are consistent with the skill's primary purpose of code verification and maintenance. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it reads and processes data from local fixture files which could be modified by external actors in a collaborative environment.
- Ingestion points: Ingests data from
input.json,input.ndjson, andexpected.mdlocated in thetestdata/directory (referenced inreferences/fixtures.md). - Boundary markers: Uses YAML frontmatter delimiters (
---) and Markdown headers (##) to structure and isolate data sections withinexpected.mdfiles. - Capability inventory: The agent can execute shell commands via
pnpmandgo testand perform git commits usingSkill(commit)(documented inSKILL.md). - Sanitization: No explicit sanitization or content validation for the fixture files is mentioned in the instruction files.
Audit Metadata