tdd
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides software engineering documentation and guidelines. The analyzed content consists of markdown instructions and code snippets illustrating testing patterns without any executable malicious payloads or unauthorized access patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface as it processes external user requirements to guide code generation and testing workflows. (1) Ingestion points: User-provided interface definitions and behavior descriptions in the planning phase in SKILL.md. (2) Boundary markers: Mandatory human-in-the-loop gates requiring user approval in SKILL.md. (3) Capability inventory: Process-driven code and test generation loop in SKILL.md. (4) Sanitization: Validation through explicit user confirmation steps.
Audit Metadata