strict-tdd
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill uses
bunx biometo run a linter. This involves downloading and executing a package from a third-party registry. While Biome is a common tool, it is not on the specific trusted source list. The severity is lowered from MEDIUM to LOW because it is essential for the skill's primary function. - [COMMAND_EXECUTION] (SAFE): The execution of
bun run typecheckis a standard operation for validating TypeScript code and is used correctly within the TDD cycle. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill handles code and test files which could contain instructions intended to influence the agent. 1. Ingestion points: User-provided source and test files. 2. Boundary markers: None. 3. Capability inventory: File execution via bun/bunx. 4. Sanitization: None. This is a common property of coding skills and is rated as LOW.
Audit Metadata