assessing-test-coverage

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill interacts with GitHub repositories and Jira issues to inventory test coverage. All network operations are scoped to official Bitwarden infrastructure or well-known services like GitHub.
  • [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI tools to retrieve repository metadata and source code. These commands are constrained to the project's functional scope and do not involve unauthorized privilege escalation.
  • [PROMPT_INJECTION]: The skill includes robust instructions to mitigate indirect prompt injection by explicitly directing the agent to treat data from external sources (Jira, PRs, CSVs) as untrusted and to ignore any embedded imperative text (citing CWE-1427).
  • [COMMAND_EXECUTION]: The provided evaluation script run_real_eval.py uses subprocess.Popen to execute the claude CLI for automated testing. This is standard behavior for an evaluation harness and includes safety monitoring to terminate subprocesses that attempt to execute unauthorized tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 01:12 AM
Security Audit — agent-trust-hub — assessing-test-coverage