tdd-process
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user requirements and bug reports, which creates a potential surface for indirect prompt injection.
- Ingestion points: User-provided tasks and bug reports are ingested in the PLANNING state within SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the user requirements.
- Capability inventory: The skill instructs the agent to use a bash tool for executing tests, linting, and build commands.
- Sanitization: No sanitization or validation steps are defined for the user-provided requirements before they are used to influence the code generation and command-line execution.
Audit Metadata