tdd-workflows-tdd-cycle
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by passing unsanitized user input into the context of downstream subagents.
- Ingestion points: The
$ARGUMENTSvariable is used in prompts for subagents throughout all phases inSKILL.md. - Boundary markers: No delimiters or isolation instructions are present to separate user input from agent instructions.
- Capability inventory: The skill has the capability to generate and review code by invoking subagents via the
Tasktool (e.g.,backend-architect,test-automator). - Sanitization: No input validation, escaping, or filtering is applied to the input before it is used to drive agent behavior.
Audit Metadata