add-missing-unit-test
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Gradle build and test commands (e.g.,
./gradlew test,./gradlew koverHtmlReport). These commands are necessary for the skill's stated purpose of implementing and verifying unit tests within a project. They do not involve network exfiltration or modification of system-level files.- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes untrusted source code from thesrc/directory to identify coverage gaps. \n 1. Ingestion points: Reads source code fromsrc/inSKILL.md.\n 2. Boundary markers: Absent.\n 3. Capability inventory: Executes subprocess calls via Gradle inSKILL.md.\n 4. Sanitization: Absent. \n However, because the skill's activities are confined to local testing and it does not involve network communication or unsafe dynamic code execution, the risk is negligible and consistent with the primary purpose of a code-analysis tool.
Audit Metadata