crap-score
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill utilizes the
dotnetCLI to execute tests and manage project dependencies. It uses standard commands likedotnet testandmsbuildto generate metrics, which is consistent with its intended purpose of code analysis. - External Downloads: To ensure accurate metrics, the skill may install well-known .NET packages and global tools such as
coverlet.collector,dotnet-coverage, andreportgeneratorfrom official registries. These are standard industry tools for gathering code coverage data. - Data Integrity and Validation: The skill includes logic to verify the consistency of ingested coverage reports, such as cross-referencing method hit ratios against reported line rates. This helps ensure that the final CRAP scores are based on valid, non-contradictory data.
Audit Metadata