skills/dotnet/skills/crap-score/Gen Agent Trust Hub

crap-score

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill utilizes the dotnet CLI to execute tests and manage project dependencies. It uses standard commands like dotnet test and msbuild to generate metrics, which is consistent with its intended purpose of code analysis.
  • External Downloads: To ensure accurate metrics, the skill may install well-known .NET packages and global tools such as coverlet.collector, dotnet-coverage, and reportgenerator from official registries. These are standard industry tools for gathering code coverage data.
  • Data Integrity and Validation: The skill includes logic to verify the consistency of ingested coverage reports, such as cross-referencing method hit ratios against reported line rates. This helps ensure that the final CRAP scores are based on valid, non-contradictory data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:22 PM
Security Audit — agent-trust-hub — crap-score