tdd-with-phpunit
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided PHP source code and test files, which introduces a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The skill uses
Read,Glob, andGreptools to ingest content from files in the project workspace (e.g.,SKILL.md,reference.md, and PHP files). - Capability inventory: It has broad capabilities including file modification (
Write,Edit) and shell execution (Bash), which could be abused if the agent follows instructions embedded in processed data. - Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore instructions found within the code it analyzes.
- Sanitization: There is no evidence of sanitization or filtering of file content before the agent interprets it or uses it to generate commands.
Audit Metadata