gherkin-bdd
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill translates user-provided requirements into executable BDD scenarios and code bindings. While this involves processing untrusted data into code, it is the primary intended function of the skill and follows standard development workflows without bypassing safety controls.
- [DYNAMIC_EXECUTION]: The instructions include the use of
ts-node/registerfor the dynamic execution of TypeScript files within the Cucumber.js framework. This is a standard configuration for development and testing environments. - [EXTERNAL_DOWNLOADS]: The skill references the installation of standard industry packages from official registries (npm, Maven Central, NuGet) such as
@cucumber/cucumber,Reqnroll, andio.cucumber. These are well-known, trusted testing libraries.
Audit Metadata