testany-import-git

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured guidance and tools for integrating Git repositories. The tools and workflows described are consistent with the skill's stated purpose of managing platform-based test cases.
  • [DATA_EXFILTRATION]: The skill specifically advises the agent to identify potential secrets (like passwords and API keys) in scripts and instruct the user to move them to the platform's secure secrets management system, which is a recognized security best practice.
  • [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface as it ingests and processes data from external Git repositories.
  • Ingestion points: Repository metadata and file content accessed via testany_browse_git_tree and testany_preview_git_file in SKILL.md.
  • Boundary markers: None explicitly defined in the agent instructions to separate repository content from system instructions.
  • Capability inventory: The skill possesses tools for platform configuration and synchronization, such as testany_create_git_import and testany_confirm_git_sync.
  • Sanitization: No specific sanitization or escaping logic is described in the prompt for handling file contents before processing. This risk is common in tools that bridge external code and agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 01:41 AM