skills/kensaurus/cursor-kenji/tdd/Gen Agent Trust Hub

tdd

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements a standard software development workflow for Test-Driven Development (TDD).
  • [COMMAND_EXECUTION]: The skill instructs the agent to run npx vitest, a common command for executing unit tests in JavaScript environments.
  • [PROMPT_INJECTION]: The skill processes user-defined feature requirements and examples which are then used to generate and execute code, creating a surface for indirect prompt injection. Ingestion points: User-provided feature descriptions and input/output pairs in SKILL.md. Boundary markers: No explicit markers are used to delimit untrusted input. Capability inventory: Execution of generated tests via npx vitest as described in SKILL.md. Sanitization: No validation or sanitization is performed on user inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 06:13 PM
Security Audit — agent-trust-hub — tdd