gherkin-bdd

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill translates user-provided requirements into executable BDD scenarios and code bindings. While this involves processing untrusted data into code, it is the primary intended function of the skill and follows standard development workflows without bypassing safety controls.
  • [DYNAMIC_EXECUTION]: The instructions include the use of ts-node/register for the dynamic execution of TypeScript files within the Cucumber.js framework. This is a standard configuration for development and testing environments.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of standard industry packages from official registries (npm, Maven Central, NuGet) such as @cucumber/cucumber, Reqnroll, and io.cucumber. These are well-known, trusted testing libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 02:24 PM