strict-tdd
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx jestwithin thescripts/enforce-red-phase.shscript to check the status of tests. This is a standard and expected operation for a tool intended to enforce TDD guardrails during a development session. - [INDIRECT_PROMPT_INJECTION]: The enforcement script processes the path of the file currently being edited, creating a potential surface for indirect injection if filenames are maliciously crafted by an external source.
- Ingestion points: The
TARGET_FILEargument inscripts/enforce-red-phase.shis populated by the file path passed from the agent's write/edit tool invocation. - Boundary markers: None present; the script assumes the input is a valid file path.
- Capability inventory: The script performs file existence checks (
[ -f ... ]) and executes shell commands (npx jest). - Sanitization: The script uses double-quoting for variable expansion (
"$TEST_FILE"), which mitigates basic word-splitting issues, though it does not explicitly validate the filename string for command injection characters. Given the context of a local development tool, this is considered a standard implementation.
Audit Metadata