test-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize a
terminaltool to run test commands (specificallypytest). This is appropriate for the skill's stated purpose of facilitating test-driven development and does not involve unauthorized or hidden command execution. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes the
delegate_taskfunction to pass instructions to subagents, which involves prompt interpolation of task goals and context (ingestion points). While the skill lacks explicit boundary markers or sanitization within the delegation template, it defines a rigid procedural framework and verification checklists to maintain code integrity across agent interactions. The agent possessesterminalandfilecapabilities (capability inventory).
Audit Metadata