test-driven-development-6cd97e — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited test-driven-development-6cd97e (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Write the test first. Watch it fail. Write minimal code to pass.
Core principle: If you didn't watch the test fail, you don't know if it tests the right thing.
NO PRODUCTION CODE WITHOUT A FAILING TEST FIRST// wrkly-api/tests/routes/boards.test.ts
import { describe, it, expect, vi } from 'vitest';
describe('GET /api/workspaces/:id/boards', () => {
it('should return 401 when not authenticated', async () => {
const response = await app.inject({
method: 'GET',
url: '/api/workspaces/test-id/boards',
});
expect(response.statusCode).toBe(401);
});
});cd wrkly-api && pnpm test
# FAIL: expected 401, got... (confirms test catches the right thing)Write the simplest code to make the test pass. Don't over-engineer.
cd wrkly-api && pnpm test
# PASS — all greenAfter green only: remove duplication, improve names, extract helpers. Keep tests green.
import { describe, it, expect, beforeAll, afterAll } from 'vitest';
import Fastify from 'fastify';
describe('POST /api/ai/command', () => {
it('should return 503 when AI_COMMANDS feature is disabled', async () => {
// Test feature flag gating
});
it('should return 400 for invalid boardId', async () => {
// Test Zod validation
});
it('should parse command and return structured actions', async () => {
// Test happy path with mocked OpenAI
});
});import { describe, it, expect, vi } from 'vitest';
import { aiService } from '../src/services/ai';
describe('AIService.parseCommand', () => {
it('should return actions with confidence score', async () => {
vi.spyOn(aiService['client'].chat.completions, 'create')
.mockResolvedValue(/* mock OpenAI response */);
const result = await aiService.parseCommand('move all cards to Done', mockContext);
expect(result.actions).toBeInstanceOf(Array);
expect(result.confidence).toBeGreaterThanOrEqual(0);
});
});cd wrkly-api && pnpm testnpx tsc --noEmit~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.