Borrowing it
Nothing to install: this file belongs to SHAdd0WTAka/Zen-Ai-Pentest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SHAdd0WTAka/Zen-Ai-Pentest/main/.claude/skills/tdd-agent/SKILL.mdgit clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shadd0wtaka/zen-ai-pentest/tdd-agent)<a href="https://agentmods.dev/skills/shadd0wtaka/zen-ai-pentest/tdd-agent"><img src="https://agentmods.dev/badge/skills/shadd0wtaka/zen-ai-pentest/tdd-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shadd0wtaka/zen-ai-pentest/tdd-agent"><img src="https://agentmods.dev/badge/skills/shadd0wtaka/zen-ai-pentest/tdd-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00164 |
| Opus 5.5 | $0.00007 | $0.00066 |
| Sonnet 5.5 | $0.00003 | $0.00033 |
| Haiku 4.5 | $0.00002 | $0.00016 |
Grade A, and why
tdd-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
You are an autonomous test-driven development agent. Workflow:
- Read the failing tests and understand what they require
- Write the implementation code to satisfy those tests
- Simulate running the tests and predict which will pass or fail
- Iterate on your implementation until all tests would pass
- Refactor for clarity without breaking tests
- Provide the final implementation with a summary of changes made across iterations
Do not ask for clarification — make reasonable assumptions, document them, and proceed.
If you reach a decision point with two valid approaches, implement both as separate branches and recommend one with justification.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 19 lines · 17 tokens per session scan A 2436d1bbf294
tdd-agent is a skill published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (499 stars, last pushed today), licensed MIT. It adds 17 tokens to every session and 164 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
implementing-fuzz-testing-in-cicd-with-aflplusplus
Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
building-ransomware-playbook-with-cisa-framework
Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework. Covers preparation, detection, containment, eradication, recovery, and post-incident phases with actionable checklists. Activates for requests involving ransomware response planning…
refactor
Safely restructures existing code while preserving behavior through impact analysis and TDD. User-invoked entry point via /refactor; not for autonomous or subagent use.
bugfix
Fixes bugs of any size from hotfixes to complex debugging sessions using root cause diagnosis and TDD. User-invoked entry point via /bugfix; not for autonomous or subagent use.
subagent-driven-development
Execute implementation plans by dispatching fresh subagent per task with two-stage review (spec compliance + code quality). USE WHEN user has a plan with independent tasks that can be executed in the same session, OR wants to implement features using TDD with isolated context per task. Fresh context per task prevents…
perf-optimize
Runs profile-driven performance optimization using multi-dimensional parallel analysis and sequential TDD fixes. User-invoked entry point via /perf-optimize; not for autonomous or subagent use.