workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a standard software development lifecycle (TDD) and git-based workflow. It promotes best practices such as automated testing, code coverage targets, and security audits.
- [INDIRECT_PROMPT_INJECTION]: The skill involves reading and updating local project files such as
plan.md,spec.md, andtech-stack.md, as well as processinggit diffandgit notesoutputs. This ingestion of data constitutes a surface for indirect prompt injection, though the risk is minimized by the highly prescriptive nature of the workflow and the manual verification checkpoints required from the user.
Audit Metadata