tdd
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a standard software development workflow for Test-Driven Development (TDD).
- [COMMAND_EXECUTION]: The skill instructs the agent to run
npx vitest, a common command for executing unit tests in JavaScript environments. - [PROMPT_INJECTION]: The skill processes user-defined feature requirements and examples which are then used to generate and execute code, creating a surface for indirect prompt injection. Ingestion points: User-provided feature descriptions and input/output pairs in
SKILL.md. Boundary markers: No explicit markers are used to delimit untrusted input. Capability inventory: Execution of generated tests vianpx vitestas described inSKILL.md. Sanitization: No validation or sanitization is performed on user inputs.
Audit Metadata