tdd-migration-pipeline

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill is configured to use the Bash tool for running tests and quality checks during the build and integration phases. This execution is confined to the migration workflow's stated purpose of verifying code correctness.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection because it ingests and analyzes external source code provided via the SOURCE parameter. However, the workflow mitigates this risk by employing a multi-layered review system involving distinct 'Critic', 'Judge', and 'Arbiter' agents to validate all generated outputs.\n- [DYNAMIC_EXECUTION]: The workflow includes a build loop where a builder agent writes code to pass specified tests. This automated code generation is a core feature of the migration pipeline and is performed within the user-defined TARGET_DIR.\n- [EXTERNAL_DOWNLOADS]: The skill accepts a REFERENCE_REPO URL for diffing purposes. This URL is used by the integration agent to compare the new codebase against the original for behavioral equivalence.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 09:04 AM
Security Audit — agent-trust-hub — tdd-migration-pipeline