testany-trigger
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill ingests user input through the
$ARGUMENTSvariable to configure automation triggers and execute pipelines.\n - Ingestion points: User-provided arguments in
SKILL.mdused for tool parameters.\n - Boundary markers: None explicitly defined to separate user input from system instructions.\n
- Capability inventory: Includes sensitive operations such as
testany_execute_pipeline,testany_create_plan, andtestany_delete_gatekeeper.\n - Sanitization: No explicit sanitization or validation of the input content is described within the skill instructions.\n- [EXTERNAL_DOWNLOADS]: The skill contains examples for integrating Testany with external services like GitHub Actions and Jenkins.\n
- Evidence: Code snippets in
SKILL.mddemonstrate usingcurlto trigger webhooks. These examples use industry-standard practices, such as referencing secrets for sensitive URLs, and do not represent active network calls by the agent itself.
Audit Metadata