tdd-repair
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes user-specified shell commands provided via the
--test-commandargument. It also spawns a headless AI agent instance (claude -p) with access to theBashtool to perform file edits and verification. - [PROMPT_INJECTION]: The skill processes the content of local files specified in the
--testargument, which introduces a potential surface for indirect prompt injection where adversarial test content could influence the AI agent's actions. - Ingestion points: Content of the test file path provided to the
--testparameter (SKILL.md). - Boundary markers: No explicit delimiters or instructions are documented to isolate test data from the agent's primary instructions.
- Capability inventory: The spawned agent has access to
Read,Edit, andBashtools (SKILL.md). - Sanitization: The skill does not describe any sanitization or validation of the ingested file content.
- [EXTERNAL_DOWNLOADS]: The documentation references the
ruvnet/agent-harness-generatorrepository on GitHub as a design reference.
Audit Metadata