skills/asiaostrich/code-buddy/bdd/Gen Agent Trust Hub

bdd

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official documentation for Cucumber (cucumber.io) and the author's own repository (github.com/AsiaOstrich/universal-dev-standards) for further reading. These are reputable sources and vendor-owned resources used for documentation purposes.
  • [DATA_EXPOSURE]: The skill uses standard placeholder credentials in examples (e.g., 'user@example.com', 'password123') for educational purposes. No actual credentials or sensitive system paths are accessed.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided functionality descriptions or feature files as input (e.g., via the /bdd command). While this represents a surface for processing external data, there are no capabilities present that would allow for privilege escalation or unauthorized actions based on that input.
  • [COMMAND_EXECUTION]: The documentation provides examples of how to run standard BDD tools (e.g., cucumber --tags @smoke). These are illustrative and do not automate command execution without user interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 03:37 AM
Security Audit — agent-trust-hub — bdd