testany-import-git
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance and tools for integrating Git repositories. The tools and workflows described are consistent with the skill's stated purpose of managing platform-based test cases.
- [DATA_EXFILTRATION]: The skill specifically advises the agent to identify potential secrets (like passwords and API keys) in scripts and instruct the user to move them to the platform's secure secrets management system, which is a recognized security best practice.
- [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface as it ingests and processes data from external Git repositories.
- Ingestion points: Repository metadata and file content accessed via
testany_browse_git_treeandtestany_preview_git_filein SKILL.md. - Boundary markers: None explicitly defined in the agent instructions to separate repository content from system instructions.
- Capability inventory: The skill possesses tools for platform configuration and synchronization, such as
testany_create_git_importandtestany_confirm_git_sync. - Sanitization: No specific sanitization or escaping logic is described in the prompt for handling file contents before processing. This risk is common in tools that bridge external code and agent context.
Audit Metadata