qe-shift-left-testing
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified. The skill is primarily informational and provides templates for standard software development practices.
- [PROMPT_INJECTION]: The skill defines a potential surface for indirect prompt injection via the processing of untrusted data in the 'Agent-Assisted Shift-Left' section.
- Ingestion points:
userStoriesandprFilesvariables are used as input for agent tasks inSKILL.md. - Boundary markers: The current templates lack explicit delimiters or instructions to ignore instructions embedded within the user-provided data.
- Capability inventory: The skill utilizes task orchestration involving specialized agents (
qe-requirements-validator,qe-test-generator,qe-regression-risk-analyzer) to analyze requirements and generate testing code. - Sanitization: No sanitization or validation of the provided strings is specified in the provided markdown examples.
Audit Metadata