skills/djalmajr/skills/agile-tdd/Gen Agent Trust Hub

agile-tdd

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill installs and executes several shell scripts (such as tdd-pre-write.sh, tdd-session-audit.sh, and tdd-record-mcp.sh) to enforce TDD workflows, perform project audits, and record evidence of testing. These scripts use standard system utilities like git, find, awk, and stat.
  • [DYNAMIC_EXECUTION]: The audit framework in templates/hooks/tdd-session-audit.sh.tmpl dynamically loads shell code using the source command. It resolves paths to helper functions and project-type-specific audit fragments at runtime (e.g., sourcing audit.partial.sh for Tauri projects).
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user input through the $ARGUMENTS variable when invoked via slash commands. It also reads and processes project-local configuration files (.tdd-guardrails.yml) and tool outputs, which are used to determine enforcement behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 05:58 PM