assessing-test-coverage
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill interacts with GitHub repositories and Jira issues to inventory test coverage. All network operations are scoped to official Bitwarden infrastructure or well-known services like GitHub.
- [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI tools to retrieve repository metadata and source code. These commands are constrained to the project's functional scope and do not involve unauthorized privilege escalation.
- [PROMPT_INJECTION]: The skill includes robust instructions to mitigate indirect prompt injection by explicitly directing the agent to treat data from external sources (Jira, PRs, CSVs) as untrusted and to ignore any embedded imperative text (citing CWE-1427).
- [COMMAND_EXECUTION]: The provided evaluation script
run_real_eval.pyusessubprocess.Popento execute theclaudeCLI for automated testing. This is standard behavior for an evaluation harness and includes safety monitoring to terminate subprocesses that attempt to execute unauthorized tools.
Audit Metadata