tdd-orchestrator
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data to perform code-related tasks, creating a potential vector for indirect prompt injection.
- Ingestion points: External requirements and user stories are consumed for test generation as specified in SKILL.md.
- Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to ignore instructions embedded in the ingested data.
- Capability inventory: The agent is authorized to use various build systems (Maven, Gradle, npm, Cargo, MSBuild) and testing frameworks to execute code and manage test environments.
- Sanitization: No explicit sanitization or validation of external content is defined in the instructions.
- [DYNAMIC_EXECUTION]: The skill facilitates the generation and execution of test code at runtime based on natural language inputs.
- Detail: The agent automates the creation and evolution of test code across multiple programming languages (Python, JavaScript, Go, etc.) as part of the red-green-refactor cycle. This is standard behavior for the intended TDD orchestration role.
- [SAFE]: No obfuscation, data exfiltration patterns, or malicious remote code execution triggers were identified in the skill content.
Audit Metadata