skills/cloudposse/atmos/test-coverage/Gen Agent Trust Hub

test-coverage

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands via the patch-test-coverage.sh script to run go test and git diff. These commands are used for local repository analysis and do not involve remote execution or unvalidated external input.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from test outputs and diffs, delegating fixes to a sub-agent. This is an inherent part of its automated maintenance function, and the instructions provide guidance to ensure that assertions are not improperly modified (e.g., 'never weaken or delete an assertion just to force a red test green').
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:52 AM