test-gap-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to run test suites and coverage reports using
python -m pytest,npx vitest, andplaywright. These are standard development operations required for its primary purpose of coverage analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes codebase content and automated test reports to generate quality intelligence and test targets.
- Ingestion points: Ingests source code, test files, and coverage output (JSON and terminal text) from the local repository (referenced in
SKILL.md). - Boundary markers: Employs structured Markdown templates and ranking tables to separate analysis metadata from the generated output.
- Capability inventory: Utilizes subprocess calls for testing frameworks and leverages MCP tools (GitHub, Code-Review-Graph) for repository insights.
- Sanitization: No specific sanitization methods for ingested file content are described, but the skill operates within a defined self-improvement loop (UAOP) with human-review checkpoints for generated test targets.
Audit Metadata