agentic-tdd
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch additional documentation and predicate references from the vendor's official domain.
- Evidence:
curl https://docs.reticle.sh/predicates.mdandcurl https://docs.reticle.sh/llms.txtinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with the output of a running application (console logs, network responses, and signals), which represents an attack surface for instructions embedded in external data.
- Ingestion points: The
reticle_act_and_waitandreticle_asserttools ingest console output, network status/headers, and application signals into the agent's context (found inSKILL.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the provided predicates.
- Capability inventory: The skill utilizes
reticle_act_and_waitfor browser/application interaction andreticle_runfor recording and saving flows (found inSKILL.md). - Sanitization: No sanitization or filtering of application-generated content is described.
Audit Metadata