skills/edwinhu/workflows/dev-tdd/Gen Agent Trust Hub

dev-tdd

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for executing standard development utilities including build systems (ninja), test runners (pytest), and process monitors (ps, pgrep).
  • [COMMAND_EXECUTION]: Includes specific command sequences for capturing application-window-only screenshots using platform-native tools like grim (Wayland), scrot (X11), and screencapture (macOS).
  • [PROMPT_INJECTION]: Identifies an indirect prompt injection surface through the mandatory requirement to read and verify application log files.
  • Ingestion points: Runtime log files and test output stored in /tmp/ (e.g., /tmp/app.log, /tmp/test.log).
  • Boundary markers: Instructions mandate reading the full log content but do not define specific delimiters to isolate log data from instructions.
  • Capability inventory: The agent has access to shell execution for development, file system operations, and screenshot capture.
  • Sanitization: The skill does not provide specific filters or sanitization rules for log content before it is processed by the agent.
  • [DATA_EXFILTRATION]: While the skill involves screen capture, it mitigates potential data exposure by mandating window-specific geometry and feature-specific cropping to ensure only the application under test is visible.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 06:30 AM
Security Audit — agent-trust-hub — dev-tdd