bdd
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official documentation for Cucumber (cucumber.io) and the author's own repository (github.com/AsiaOstrich/universal-dev-standards) for further reading. These are reputable sources and vendor-owned resources used for documentation purposes.
- [DATA_EXPOSURE]: The skill uses standard placeholder credentials in examples (e.g., 'user@example.com', 'password123') for educational purposes. No actual credentials or sensitive system paths are accessed.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided functionality descriptions or feature files as input (e.g., via the
/bddcommand). While this represents a surface for processing external data, there are no capabilities present that would allow for privilege escalation or unauthorized actions based on that input. - [COMMAND_EXECUTION]: The documentation provides examples of how to run standard BDD tools (e.g.,
cucumber --tags @smoke). These are illustrative and do not automate command execution without user interaction.
Audit Metadata