e2e-run
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes project-defined testing scripts and build tasks using package managers (npm, pnpm, yarn, bun) and build systems (make, turbo, nx).
- [COMMAND_EXECUTION]: Employs the
killcommand to manage and terminate service processes that were explicitly started by the skill during a test run to prevent environment pollution. - [EXTERNAL_DOWNLOADS]: Utilizes
curlto perform network reachability checks and retrieve local HTML content when validating project specifications in specification-driven mode. - [PROMPT_INJECTION]: Incurs a risk of indirect prompt injection by processing instructions from local Markdown specification files to drive browser interactions via
agent-browser. - Ingestion points: Processes Markdown files found in project directories such as
specs/e2e/,docs/e2e/, andtests/e2e/specs/. - Boundary markers: No explicit delimiters or 'ignore' instructions are used to distinguish specification data from potential embedded commands when parsing these files.
- Capability inventory: The execution environment provides access to
agent-browser,Bash,Write, andcurltools. - Sanitization: No sanitization or safety filtering of the ingested Markdown content is performed before it is used to guide the browser agent.
Audit Metadata