tdd-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the use of R development tools such as devtools::test() and covr::package_coverage() to execute test suites and analyze code coverage. These operations are standard for R package development and align with the skill's primary purpose.\n- [DYNAMIC_EXECUTION]: The skill utilizes usethis functions (e.g., usethis::use_r, usethis::use_test) to generate boilerplate R source and test files. This dynamic file creation is a legitimate development feature and does not involve untrusted data.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents the use of data fixtures (e.g., tests/testthat/fixtures/sample_input.csv) ingested via read_fixture. While this represents a potential surface for indirect injection if fixtures are sourced from untrusted locations, the skill promotes self-contained testing and standard setup/teardown practices to minimize risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 02:23 AM