tdd-workflows-tdd-cycle
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface where user-supplied input is directly incorporated into instructions for subagents.
- Ingestion points: The $ARGUMENTS variable is used throughout the workflow in SKILL.md to define prompts for various agents.
- Boundary markers: There are no delimiters or instructions provided to the subagents to ignore or isolate potential commands embedded within the user input.
- Capability inventory: The workflow orchestrates subagents like backend-architect and test-automator which likely possess capabilities for file modification and code execution.
- Sanitization: No validation or filtering is performed on the user-provided arguments before they are passed to the subagents.
Audit Metadata