kata-ex-coverage
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Elixir script (
coverage_tool.exs) to perform analysis. The script invokes the systemgitcommand to retrieve recent changes. Arguments togit(such as the number of commits) are parsed as integers, minimizing the risk of shell injection. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (source code and test files) to identify coverage gaps, which is a known vector for indirect instructions.
- Ingestion points: The agent reads project source files (
.ex) and test files (.exs) during Analyze Mode to display uncovered blocks and existing test context. - Boundary markers: The instructions do not specify the use of clear delimiters or guardrails to prevent the agent from interpreting instructions embedded within the analyzed source code.
- Capability inventory: The skill allows file reading, writing to a local progress tracker (
.coverage_progress.txt), and execution of the provided Elixir script. - Sanitization: There is no evidence of sanitization or filtering of the source code content before it is processed by the agent.
Audit Metadata