coverage-tracker-setup

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the newsjack command-line utility to initialize trackers (newsjack coverage init), check status (newsjack coverage status), and verify versions. These operations are within the expected scope of a setup skill.
  • [SAFE]: The instructions explicitly forbid the use of system-level persistence mechanisms such as cron, launchd, or systemd timers, directing the agent to use its own internal scheduling capabilities instead.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or malicious obfuscation was found. The skill manages local JSON configuration files and assumes the necessary binary is already present in the environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 01:08 AM
Security Audit — agent-trust-hub — coverage-tracker-setup