crap-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the .NET tool manifest (
dotnet-tools.json) to manage the installation ofdotnet-reportgenerator-globaltool. This is a standard practice for project-local tool management in the .NET ecosystem. - [COMMAND_EXECUTION]: The skill provides various shell commands for cleaning directories, running unit/integration tests with coverage collection (
dotnet test), and generating reports (dotnet reportgenerator). These commands are standard for development workflows and are restricted to the local environment and project files. - [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting tool-generated XML coverage data to produce human-readable reports. While this involves processing external data, the data is structured and used for reporting rather than instruction interpolation, posing no significant risk to agent behavior.
Audit Metadata