The Agent Skills Directory

[SAFE]: No security issues detected. The skill consists of analytical Python scripts and documentation for TDD workflows.
[PROMPT_INJECTION]: No evidence of malicious prompt injection or behavior override patterns found. Instructional language is consistent with the skill's purpose.
[DATA_EXFILTRATION]: No network operations (curl, wget, requests) or access to sensitive file paths (~/.ssh, ~/.aws) were detected in any of the scripts.
[REMOTE_CODE_EXECUTION]: The scripts do not download or execute remote code. All operations are performed locally on inputs provided within the agent context.
[COMMAND_EXECUTION]: While the skill provides commands for the agent to run (e.g., python scripts/test_generator.py), these scripts are part of the skill package and do not execute arbitrary shell commands or user-supplied strings via os.system or eval.
[OBFUSCATION]: All code and documentation are in plain text. No Base64, hex encoding, or zero-width character obfuscation was found.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (code, coverage reports), but its internal processing logic (regex-based analysis and standard JSON/XML parsing) does not expose dangerous capabilities like network access or file system modifications, mitigating the risk of indirect injection.

tdd-guide