tdd
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and executes shell commands derived from local project configuration files, such as Makefile or package.json, to run test suites like test-unit, test-integration, and test-all.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent attack surface for indirect prompt injection because it processes external data from the local workspace to inform its repair actions.
- Ingestion points: Reads contents from source code files, tech-stack-rule.md, directory-rule.md, and various specification documents within the docs/ folder.
- Boundary markers: The instructions do not define clear delimiters or use specialized markers to prevent the agent from interpreting instructions that might be embedded within the processed source code or documentation.
- Capability inventory: The skill is authorized to perform file modifications and execute shell commands within the project environment.
- Sanitization: There is no evidence of validation or sanitization of the data read from the workspace before it is used by the subagents.
Audit Metadata