tdd
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill recommends that the agent read a
CONTEXT.mdfile (if present) to align its test names and vocabulary with the project's domain language. This presents a potential surface for indirect prompt injection via project files. - Ingestion points:
CONTEXT.mdfile in the project directory (referenced inSKILL.md). - Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: The skill facilitates code generation and testing; the agent is likely equipped with file system access and test runner tools.
- Sanitization: No specific sanitization or filtering of the
CONTEXT.mdcontent is mentioned. - [SAFE]: The skill contains instructional documentation and code examples (TypeScript/Jest) that follow standard software engineering practices. It provides examples of how to use environment variables for keys (e.g.,
process.env.STRIPE_KEY) rather than hardcoding credentials, and it promotes safe architectural patterns like dependency injection.
Audit Metadata