optimizetests
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various project-specific commands using the
pnpmpackage manager, includingpnpm test,pnpm check, andpnpm buildto verify optimizations. - [COMMAND_EXECUTION]: It uses system utilities such as
/usr/bin/timeandtimeoutto establish performance benchmarks for targeted test files. - [COMMAND_EXECUTION]: The skill interacts with the GitHub CLI (
gh) to monitor CI/CD pipelines and executes a repository-local scriptscripts/committerto record changes. - [PROMPT_INJECTION]: There is a surface for indirect prompt injection because the agent is instructed to read documentation and configuration files (
docs/help/testing.md,docs/ci.md,AGENTS.md) which could contain malicious instructions if the repository content is untrusted. - Ingestion points: Files
docs/help/testing.md,docs/ci.md, andAGENTS.mdare read during the runbook execution. - Boundary markers: None present; the agent processes these files as direct instructions/context.
- Capability inventory: The agent can execute shell commands via
pnpm,gh, andscripts/committerand has file system access within the repository. - Sanitization: No explicit sanitization or validation of the content of the read files is performed before the agent follows the instructions therein.
Audit Metadata