qa-test-design-tdd-bridge
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several industry-standard testing tools and documentation sites, including fast-check, Hypothesis, and Microsoft's PICT repository. These references are provided for documentation and technical guidance purposes. All referenced sources originate from well-known technology organizations or official package registries and are handled neutrally as legitimate project resources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of module source code and API specifications to design test cases.
- Ingestion points: Reads module source files and public API definitions from the filesystem using
ReadandGlobtools. - Boundary markers: The instructions do not define specific delimiters to isolate source code content from agent instructions, which is common for static analysis tasks.
- Capability inventory: The skill is permitted to use
Bash,Grep,Read, andGlobto perform its analysis. - Sanitization: The skill relies on the agent's logic to parse code structure rather than implementing explicit input sanitization. This represents a standard attack surface for code-analysis skills but lacks any evidence of exploitable behavior or malicious intent.
Audit Metadata