tdd-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines an orchestration workflow that ingests and processes external code and test files, creating an attack surface where malicious instructions could be embedded in the data.\n
- Ingestion points: The agent is instructed to read source code, test definitions, and task metadata from the project environment using tools such as
Read,Grep,Glob, andTaskGet(referenced inSKILL.md).\n - Boundary markers: The instructions do not specify the use of clear delimiters or instructions for the agent to ignore prompt-like content within the code it processes.\n
- Capability inventory: The skill includes high-privilege tools such as
Bashfor command execution andWrite/MultiEditfor file system changes, which increase the potential impact of a successful injection.\n - Sanitization: There is no provision for validating or sanitizing the content of ingested files before they are incorporated into the agent's reasoning process.
Audit Metadata