tdd-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions focus on software development best practices, specifically enforcing TDD cycles (Red-Green-Refactor) and high test coverage thresholds.
- [COMMAND_EXECUTION]: The skill references standard development commands such as
npm testandnpm run test:coverage. These are typical for code-focused agents and are used here within their intended context of validating software quality. - [EXTERNAL_DOWNLOADS]: The skill mentions well-known services and tools such as Jest, Vitest, Playwright, and Codecov. These are documented neutrally as part of the development and CI/CD workflow, aligning with standard industry practices.
- [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration patterns were detected. The skill correctly encourages mocking external services like Supabase, Redis, and OpenAI during testing, which is a recommended security practice to prevent accidental production data exposure or cost overruns during development.
Audit Metadata