tdd-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill provides standard instructional content for software development workflows, focusing on Test-Driven Development principles and best practices.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known services and GitHub Actions for continuous integration workflows.
  • Evidence: References the official codecov/codecov-action@v3 for automated coverage reporting in the CI/CD section of SKILL.md.
  • [COMMAND_EXECUTION]: Includes standard Node.js development commands for running tests and verifying code quality.
  • Evidence: Mentions execution of npm test, npm run test:coverage, and npm run lint within the development workflow instructions.
  • [PROMPT_INJECTION]: The skill processes user-provided 'User Journeys' to generate test cases and implementation code.
  • Ingestion points: User-defined journeys provided during the first step of the TDD workflow in SKILL.md.
  • Boundary markers: None explicitly defined in the templates, relying on the agent's internal safety constraints when processing user input.
  • Capability inventory: Instructs the agent to generate TypeScript code, test files, and execute local development scripts.
  • Sanitization: No explicit sanitization logic is provided in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 12:58 PM
Security Audit — agent-trust-hub — tdd-workflow