Tdd Orchestrator
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external requirements, user stories, and source code, which serves as an ingestion point for untrusted data. It does not provide the agent with specific protocols to ignore or sanitize instructions that might be embedded in these external sources.
- Ingestion points: The skill instructs the agent to evaluate requirements and code changes (SKILL.md).
- Boundary markers: No delimiters or 'ignore' instructions are defined to separate untrusted data from system instructions.
- Capability inventory: The persona is described as coordinating build systems, test runners, and IDE plugins (SKILL.md).
- Sanitization: There is no mention of sanitizing or validating external content before processing.
Audit Metadata