test-driven-development
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by reading untrusted project code and possessing the capability to execute shell commands and modify files.
- Ingestion points: The skill utilizes tools like 'miller' to inspect source code and project metadata from the local environment (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or specific directives for the agent to ignore prompt-like content found within the ingested source code.
- Capability inventory: The skill is authorized to execute project-defined test commands and is instructed to perform file deletions for non-compliant code during the TDD process (SKILL.md).
- Sanitization: There is no evidence of content sanitization or validation performed on the data read from the local file system.
Audit Metadata