tdd
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to discover the project's testing stack by reading repository manifest files and executing commands found within them, which could potentially contain malicious instructions if the repository is untrusted.
- Ingestion points: Project manifest and documentation files including
package.json,pyproject.toml,go.mod,Cargo.toml,Makefile,GLOSSARY.md, andCONTEXT.md(referenced inSKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are specified when reading these files.
- Capability inventory: The skill allows for the execution of shell commands discovered in the repository (e.g.,
make test,./gradlew,npm test) as part of the TDD workflow. - Sanitization: There is no evidence of sanitization or validation of the content read from the repository manifest files before it is used to determine execution paths.
Audit Metadata