tdd-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions focus on software development best practices, specifically enforcing TDD cycles (Red-Green-Refactor) and high test coverage thresholds.
  • [COMMAND_EXECUTION]: The skill references standard development commands such as npm test and npm run test:coverage. These are typical for code-focused agents and are used here within their intended context of validating software quality.
  • [EXTERNAL_DOWNLOADS]: The skill mentions well-known services and tools such as Jest, Vitest, Playwright, and Codecov. These are documented neutrally as part of the development and CI/CD workflow, aligning with standard industry practices.
  • [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration patterns were detected. The skill correctly encourages mocking external services like Supabase, Redis, and OpenAI during testing, which is a recommended security practice to prevent accidental production data exposure or cost overruns during development.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 07:23 PM
Security Audit — agent-trust-hub — tdd-workflow