skills/luongnv89/skills/test-coverage/Gen Agent Trust Hub

test-coverage

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands for repository management and testing. This includes Git operations such as git fetch, git pull, git stash, and git checkout to synchronize code. It also runs test suites and coverage tools like npx jest, pytest, go test, and cargo tarpaulin to measure coverage metrics.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local project data, which could potentially contain malicious instructions that influence agent behavior.
  • Ingestion points: Reads project manifests (package.json, pyproject.toml, go.mod, Cargo.toml), source code, and generated coverage reports.
  • Boundary markers: Absent for the analyzed content.
  • Capability inventory: Executes shell commands (git, npx, pytest, etc.) and performs file write operations to create new tests.
  • Sanitization: No explicit sanitization or validation of the ingested project data is performed.
  • [EXTERNAL_DOWNLOADS]: The skill may attempt to install missing coverage tools such as pytest-cov, nyc, or cargo tarpaulin using standard package managers (e.g., pip, npm, cargo) if they are not detected in the environment. It also utilizes npx, which can fetch and execute packages from the registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 03:33 PM