tdd-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a procedural guide for TDD. It defines a structured workflow (User Journey -> Test -> Implementation -> Refactor) and provides best practices for testing React components, APIs, and E2E flows using industry-standard tools like Jest, Vitest, and Playwright.
- [DATA_EXPOSURE_&_EXFILTRATION]: No sensitive data or credentials are hardcoded. The skill explicitly demonstrates how to mock sensitive external services (Supabase, Redis, OpenAI) during testing, which is a security best practice.
- [COMMAND_EXECUTION]: The shell commands included (
npm test,npm run test:coverage) are standard development tasks. There are no attempts to execute arbitrary remote code or use elevated privileges. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing user-provided 'User Journeys' to generate test cases. This represents a standard input surface for a development agent, and the skill provides clear structural templates (Roles, Actions, Benefits) to keep this data delimited and focused on the intended task.
Audit Metadata