test-dependency-mapper

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. The skill's content is consistent with its stated purpose of mapping test dependencies.
  • [COMMAND_EXECUTION]: The skill provides examples of local npm commands for test analysis (e.g., npm run test:dependencies:map). These are standard operations for development tools and do not involve remote downloads or elevated privileges.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided test structures and dependency relationships.
  • Ingestion points: Test type names and dependency descriptions provided in the project context.
  • Boundary markers: Not explicitly defined in the markdown-based instructions.
  • Capability inventory: Includes local script execution (scripts/example.sh) and standard npm task execution.
  • Sanitization: No specific sanitization logic is present for user-defined test metadata, though the risk is negligible given the descriptive nature of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 10:29 AM