test-driven-development
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing a framework for Test-Driven Development (TDD). It enforces a strict "test-first" methodology using standard development workflows.
- [COMMAND_EXECUTION]: The skill references the use of
npm test, which is a standard local command for executing JavaScript/TypeScript tests. There are no indications of arbitrary command execution or shell injection vulnerabilities. - [DATA_EXFILTRATION]: No network operations or access to sensitive file paths were identified. The instructions focus on local code implementation and testing.
- [PROMPT_INJECTION]: While the skill uses strong imperative language such as "The Iron Law" and "No exceptions" to define the TDD process, these are methodological constraints rather than attempts to bypass AI safety filters or extract system prompts.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations. It references a local documentation file,
@testing-anti-patterns.md, which contains further guidance on testing practices.
Audit Metadata