test-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external codebase files and execute shell commands using standard test runners like 'npm test'. This creates a potential surface for indirect prompt injection if the processed project files contain malicious instructions intended to influence the agent's behavior during the testing cycle.
- Ingestion points: The agent reads and analyzes user-provided source code and test files as described in the RED-GREEN-REFACTOR cycle in SKILL.md.
- Boundary markers: The skill does not define specific delimiters for separating user-provided code from agent instructions.
- Capability inventory: The skill utilizes shell command execution via the 'npm test' command in SKILL.md.
- Sanitization: No explicit sanitization or validation of the content of the project files is mentioned before execution.
- [SAFE]: No specific malicious patterns, obfuscation, or data exfiltration attempts were detected. The skill uses standard, well-known development tools and provides legitimate educational content regarding software testing practices.
Audit Metadata