behavior-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate software development guidelines and does not contain malicious code, obfuscation, or unauthorized access patterns. It establishes a rigorous workflow for the agent to ensure code quality through behavior-driven specifications.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided feature requests and Gherkin scenarios, which represents a standard ingestion surface for untrusted data in development tools.
- Ingestion points:
SKILL.md(Step 2: Define Scenarios) andreferences/gherkin-guide.mddescribe processing user-defined behaviors to drive implementation. - Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within user-provided scenarios.
- Capability inventory: The skill facilitates file creation/modification (production code and
.featurefiles) and test execution (as described in the Red-Green-Refactor cycle). - Sanitization: No specific sanitization logic or validation of user-supplied Gherkin syntax is mentioned.
Audit Metadata