django-tdd
Warn
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill contains hardcoded passwords in multiple locations within
SKILL.md.\n - Evidence:
password='testpass123'intests/conftest.py.\n - Evidence:
password='adminpass123'intests/conftest.py.\n - Evidence:
password = factory.PostGenerationMethodCall('set_password', 'testpass123')intests/factories.py.\n- [PROMPT_INJECTION]: The skill establishes a workflow for ingesting and executing tests on Django codebases, creating a surface for Indirect Prompt Injection.\n - Ingestion points: Test data and code structures from the Django application are read by the agent to generate and run tests.\n
- Boundary markers: Absent. No specific delimiters or "ignore" instructions are used for user-provided code.\n
- Capability inventory: The skill utilizes
pytestand Django'sclientfor database interaction and logic execution intests/test_views.py.\n - Sanitization: Absent. There is no filtering or validation of the code being tested.
Audit Metadata