test-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates the use of 'npm test' to verify that code satisfies written tests. This is a routine operation in software development environments and aligns with the skill's core purpose.- [INDIRECT_PROMPT_INJECTION]: The skill functions by processing user-provided code and test files. While this creates a potential surface for indirect injection if malicious code is processed, the risk is inherent to any development-related automation tool and is managed by standard execution environments.
- Ingestion points: User-supplied source code and test files as described in the TDD cycle.
- Boundary markers: Not explicitly specified in the instructions for separating code from execution.
- Capability inventory: Execution of local testing scripts via 'npm test' mentioned in SKILL.md.
- Sanitization: The skill does not implement custom sanitization for code files, as it relies on the user's existing test runner and project configuration.
Audit Metadata