test-driven-development
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use a
terminaltool to run test commands such aspytest tests/test_feature.py::test_specific_behavior -vandpytest tests/ -q. This is a standard and expected functionality for a development-focused skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes and acts upon external data (source code and test suites) which it ingests into the agent's context. This presents a surface for indirect prompt injection if the processed files contain malicious instructions.
- Ingestion points: The skill reads source files and test scripts throughout the development cycle as part of the RED-GREEN-REFACTOR process.
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the codebase being processed.
- Capability inventory: The skill utilizes the
terminaltool for executing shell commands, thefiletool for modifying project files, and thedelegate_tasktool for task orchestration. - Sanitization: The skill does not specify procedures for validating or sanitizing the content of the files it manages.
Audit Metadata