Quality-Driven Development (QDD)

• Outcome: Pass
• Latest audit: May 28, 2026 at 9:09 AM UTC
• Version:
  1.1.0

Overview

This is an instruction-only development workflow skill that asks the agent to plan, test, edit code, and review logs in ways that match its stated purpose.

Install this if you want the agent to enforce a structured coding workflow with specs, tests, logging review, and quality gates. Keep work under version control and review any generated logs, dependency additions, test commands, and code diffs before accepting changes.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The skill advertises itself for essentially any coding task ('building features, refactoring code, fixing bugs, or any coding task'), which makes it eligible to activate in a very broad set of contexts. Overly broad activation can cause unintended invocation, instruction precedence conflicts, and increased exposure to risky workflows such as automatic project analysis, test execution, and code modification in repositories where the skill was not specifically intended to run.

VirusTotal

66/66 vendors flagged this skill as clean.