test-coverage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands for repository management and testing. This includes Git operations such as
git fetch,git pull,git stash, andgit checkoutto synchronize code. It also runs test suites and coverage tools likenpx jest,pytest,go test, andcargo tarpaulinto measure coverage metrics. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local project data, which could potentially contain malicious instructions that influence agent behavior.
- Ingestion points: Reads project manifests (
package.json,pyproject.toml,go.mod,Cargo.toml), source code, and generated coverage reports. - Boundary markers: Absent for the analyzed content.
- Capability inventory: Executes shell commands (
git,npx,pytest, etc.) and performs file write operations to create new tests. - Sanitization: No explicit sanitization or validation of the ingested project data is performed.
- [EXTERNAL_DOWNLOADS]: The skill may attempt to install missing coverage tools such as
pytest-cov,nyc, orcargo tarpaulinusing standard package managers (e.g.,pip,npm,cargo) if they are not detected in the environment. It also utilizesnpx, which can fetch and execute packages from the registry.
Audit Metadata