crap-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the .NET tool manifest (dotnet-tools.json) to manage the installation of dotnet-reportgenerator-globaltool. This is a standard practice for project-local tool management in the .NET ecosystem.
  • [COMMAND_EXECUTION]: The skill provides various shell commands for cleaning directories, running unit/integration tests with coverage collection (dotnet test), and generating reports (dotnet reportgenerator). These commands are standard for development workflows and are restricted to the local environment and project files.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting tool-generated XML coverage data to produce human-readable reports. While this involves processing external data, the data is structured and used for reporting rather than instruction interpolation, posing no significant risk to agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 10:26 PM