tdd
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Ruby on Rails development tools including
bundle exec rspecfor testing,bundle exec rubocopfor linting, andbundle exec brakemanfor security vulnerability scanning. These commands are executed locally within the project environment as part of the intended TDD workflow.\n- [PROMPT_INJECTION]: The skill maintains an attack surface for indirect prompt injection as it processes local project data and test output to drive its automated actions.\n - Ingestion points: The skill loads the project schema, routes, patterns, and test failure output from the local environment (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when processing ingested data.\n
- Capability inventory: The agent can execute shell commands via the
bundle execsuite (SKILL.md).\n - Sanitization: No specific sanitization or filtering of ingested file content is described. Remediation: Wrap external content in delimiters with explicit instructions to ignore embedded instructions and validate source files before processing.
Audit Metadata