tdd-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands such as
npm test,npm run test:coverage, andnpm run lint. These are essential for the stated purpose of validating code through automated testing and measuring coverage. - [DATA_EXPOSURE]: Integration test examples target
http://localhost, which is a safe and standard practice for testing API routes during development. No sensitive credentials or external data exfiltration patterns were observed. - [REMOTE_CODE_EXECUTION]: The skill refers to well-known testing frameworks (Jest, Vitest, Playwright) and mentions CI/CD integration using official GitHub Actions (
codecov/codecov-action). No execution of untrusted remote scripts or unverifiable dependencies was found.
Audit Metadata