tdd-hybrid
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands, specifically
npm test, to verify code functionality. This behavior is expected for a TDD skill and targets local files. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it requires the agent to read and act upon user-provided code.
- Ingestion points: The agent reads source code and test files during the TDD loop (SKILL.md).
- Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or to disregard potential instructions embedded in the code files.
- Capability inventory: The agent has the capability to execute shell commands and modify the local filesystem (SKILL.md).
- Sanitization: Absent. No sanitization or verification of the code content is performed before the agent processes it.
Audit Metadata