skills/jayden-dang/skills/test-first/Gen Agent Trust Hub

test-first

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes instructions from local project documentation files, creating a surface for indirect prompt injection.
  • Ingestion points: The agent is directed to read from design.md, docs/agents/project.md, docs/specs/**, and docs/standards/testing.md.
  • Boundary markers: There are no specific instructions for the agent to treat content within these files as untrusted or to use delimiters.
  • Capability inventory: The skill involves executing test commands and performing file deletions (removing production code written without tests).
  • Sanitization: Content from documentation files is used directly without validation or filtering.
  • [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands found in local documentation to verify test results.
  • Evidence: The skill instructs the agent to "Run the test (single-file command from docs/agents/project.md)". This is a standard development capability within the scope of the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 03:24 AM