tdd-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides standard instructional content for software development workflows, focusing on Test-Driven Development principles and best practices.
- [EXTERNAL_DOWNLOADS]: The skill references well-known services and GitHub Actions for continuous integration workflows.
- Evidence: References the official
codecov/codecov-action@v3for automated coverage reporting in the CI/CD section of SKILL.md. - [COMMAND_EXECUTION]: Includes standard Node.js development commands for running tests and verifying code quality.
- Evidence: Mentions execution of
npm test,npm run test:coverage, andnpm run lintwithin the development workflow instructions. - [PROMPT_INJECTION]: The skill processes user-provided 'User Journeys' to generate test cases and implementation code.
- Ingestion points: User-defined journeys provided during the first step of the TDD workflow in SKILL.md.
- Boundary markers: None explicitly defined in the templates, relying on the agent's internal safety constraints when processing user input.
- Capability inventory: Instructs the agent to generate TypeScript code, test files, and execute local development scripts.
- Sanitization: No explicit sanitization logic is provided in the skill instructions.
Audit Metadata