tdd
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running common testing tools including
npx jest,npx vitest,pytest,go test, andcargo test. These commands are standard for development environments and are intended for executing local test suites. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined software requirements to generate test cases and code. This creates a potential surface for indirect prompt injection if the ingested data contains instructions designed to manipulate the agent.
- Ingestion points: User-provided feature requirements and functional descriptions.
- Boundary markers: None present. The skill does not use specific delimiters to isolate user input from system instructions.
- Capability inventory: The skill is capable of generating source code and suggesting shell command execution for testing.
- Sanitization: No sanitization or input validation logic is implemented for the processed text.
- [EXTERNAL_DOWNLOADS]: The skill includes a recommendation to install an external tool called 'SkillHub' from a GitHub repository (
github:mindverse/skillhub) if the user's requirements (such as CI/CD configuration) exceed the skill's native capabilities.
Audit Metadata