workflow-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a standard software development lifecycle (TDD) and git-based workflow. It promotes best practices such as automated testing, code coverage targets, and security audits.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves reading and updating local project files such as plan.md, spec.md, and tech-stack.md, as well as processing git diff and git notes outputs. This ingestion of data constitutes a surface for indirect prompt injection, though the risk is minimized by the highly prescriptive nature of the workflow and the manual verification checkpoints required from the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:46 AM