test-driven-development
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development methodology guide, implementing the Red-Green-Refactor cycle. It uses standard shell commands such as
npm testfor local verification, which is entirely consistent with its stated purpose of managing a test-driven workflow. - [INDIRECT_PROMPT_INJECTION]: The skill has a functional surface for processing user-supplied code and test definitions, which is an inherent part of its role as a TDD assistant.
- Ingestion points: Implementation code, bug descriptions, and test files provided by the user or the caller skill (
do-scoped). - Boundary markers: The skill does not define specific delimiters for separating untrusted user code from agent instructions.
- Capability inventory: Executes
npm testvia the shell to run the test suite. - Sanitization: No internal sanitization or validation of the provided code is performed, as it relies on the environment's test runner to execute the logic.
Audit Metadata