testany-trigger

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill ingests user input through the $ARGUMENTS variable to configure automation triggers and execute pipelines.\n
  • Ingestion points: User-provided arguments in SKILL.md used for tool parameters.\n
  • Boundary markers: None explicitly defined to separate user input from system instructions.\n
  • Capability inventory: Includes sensitive operations such as testany_execute_pipeline, testany_create_plan, and testany_delete_gatekeeper.\n
  • Sanitization: No explicit sanitization or validation of the input content is described within the skill instructions.\n- [EXTERNAL_DOWNLOADS]: The skill contains examples for integrating Testany with external services like GitHub Actions and Jenkins.\n
  • Evidence: Code snippets in SKILL.md demonstrate using curl to trigger webhooks. These examples use industry-standard practices, such as referencing secrets for sensitive URLs, and do not represent active network calls by the agent itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 11:30 AM