tdd
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides a legitimate framework for software development using TDD practices, including process steps for writing tests before implementation.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run unit tests viamvn testandnpx vitest. These commands are standard for Java and Node.js development environments and align with the primary purpose of the skill. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes user requirements to generate and execute code.
- Ingestion points: User requirements and feature descriptions (SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters for user-provided data.
- Capability inventory: The skill allows the use of
Bash,Write,Edit,Read,Grep, andGlobtools (SKILL.md). - Sanitization: Absent; the agent is not instructed to sanitize or validate user-provided instructions before implementation.
Audit Metadata