tdd-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of R development tools such as
devtools::test()andcovr::package_coverage()to execute test suites and analyze code coverage. These operations are standard for R package development and align with the skill's primary purpose.\n- [DYNAMIC_EXECUTION]: The skill utilizesusethisfunctions (e.g.,usethis::use_r,usethis::use_test) to generate boilerplate R source and test files. This dynamic file creation is a legitimate development feature and does not involve untrusted data.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents the use of data fixtures (e.g.,tests/testthat/fixtures/sample_input.csv) ingested viaread_fixture. While this represents a potential surface for indirect injection if fixtures are sourced from untrusted locations, the skill promotes self-contained testing and standard setup/teardown practices to minimize risks.
Audit Metadata