coverage-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Standard Tool Integration: The skill integrates with
dotnet-reportgenerator-globaltool, a well-known utility in the .NET ecosystem. While it attempts to install this tool if missing, it does so using the officialdotnet tool installcommand and targets a local subdirectory within the workspace. - Local Command Execution: The skill uses PowerShell scripts (
Compute-CrapScores.ps1,Extract-MethodCoverage.ps1) to parse XML data and compute risk scores. These operations are performed locally on the user's coverage reports. - Workspace Discovery: The skill performs discovery of .NET solutions and projects using standard filesystem probes and
gitcommands. It includes safety checks to avoid modifying classic (non-SDK) project files and limits its scope to the active workspace. - Credential Handling: No hardcoded credentials or sensitive data exfiltration patterns were detected. The skill focuses exclusively on public code metrics and test results.
Audit Metadata