The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities detected. The skill implements a standard TDD workflow using local specification files. The skill operates with least privilege, as indicated by the empty allowed-tools list in the metadata.
[INDIRECT_PROMPT_INJECTION]: The skill processes external SPEC files as authoritative instructions for code generation. While this represents an attack surface for indirect prompt injection, it is the primary intended purpose of the skill and the risk is mitigated by the restricted tool environment.

execute-spec