tdd-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that processes untrusted user input to drive code generation and execution.
- Ingestion points: The skill triggers on user requests containing keywords like 'implement' or 'add feature' in SKILL.md metadata.
- Boundary markers: The instructions lack defined boundary markers or instructions for the agent to treat the feature requirements as untrusted content.
- Capability inventory: The TDD cycle involves file writes and command execution (running integration tests) based on user-provided requirements.
- Sanitization: The instructions do not include steps to sanitize or validate the user-supplied requirements before they influence code execution.
- [NO_CODE]: The skill consists entirely of markdown instructions and YAML metadata without any accompanying scripts or executables.
Audit Metadata