tdd
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions describe a 'Test-Driven Prompting (TDP)' pattern that captures verbatim test output (stdout and stderr) and interpolates it directly into the prompt for subsequent agent tasks. This creates a surface for indirect prompt injection where malicious code or tests could output instructions to manipulate the behavior of the implementer agent.\n
- Ingestion points: Captured from
execSyncoutput during the TDD loop as described inSKILL.mdand the 'Test-Driven Prompting (TDP)' section.\n - Boundary markers: The prompt template uses triple backticks (markdown code blocks) but lacks defensive instructions for the agent to treat the data as untrusted.\n
- Capability inventory: The pattern uses the
Tasktool to spawn subagents and requiresBashorEditcapabilities for the implementation phase.\n - Sanitization: No sanitization or character escaping of the captured test output is implemented.
Audit Metadata