tdd
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The instructions provide standard architectural and testing guidelines. No attempts to bypass safety filters, override system prompts, or elicit restricted behavior were detected.
- [DATA_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns are present. Examples using environment variables like
STRIPE_KEYare illustrative of coding best practices and do not contain actual secrets. - [OBFUSCATION]: The content is clear and uses standard Markdown. No hidden characters, encoded strings, or homoglyph attacks were identified.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any external downloads, package installations, or remote script execution.
- [COMMAND_EXECUTION]: There are no shell commands or subprocess calls defined within the skill instructions or metadata.
- [INDIRECT_PROMPT_INJECTION]: While the skill suggests reading local files like
GLOSSARY.mdfor context, it does not process untrusted external data in a way that could lead to instruction injection. It functions primarily as a reference guide. - [DYNAMIC_CONTEXT_INJECTION]: No use of dynamic execution placeholders (e.g.,
!command) was found in the skill definition.
Audit Metadata