SkillSpector · qa-methodology

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

tests/test_check_ac_testability.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

tests/test_risk_prioritize.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/test-automation.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/test-automation.md

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

templates/bug-report.md

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

tests/test_check_ac_testability.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

tests/test_risk_prioritize.py

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

references/security-testing.md