test-coverage-improver
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate developer workflows for test coverage analysis.
- [COMMAND_EXECUTION]: The skill instructions include standard shell commands for running test coverage reports (
npx jest,npx vitest,npx nyc). These are executed locally using the project's existing dependencies and do not represent a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent analyzes codebase content and coverage reports to generate new tests. While this involves processing untrusted data (source code), the scope is limited to code generation within the developer's environment without high-risk capability chains like data exfiltration.
Audit Metadata