coverage-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate .NET code coverage analysis and risk assessment. Its operations are transparent and consistent with its documented purpose.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install
dotnet-reportgenerator-globaltoolusing the .NET CLI. This is a well-known, established utility in the .NET ecosystem used for generating coverage reports. - [COMMAND_EXECUTION]: The skill utilizes local PowerShell scripts (
Compute-CrapScores.ps1,Extract-MethodCoverage.ps1) to parse Cobertura XML files. These scripts are bundled with the skill and perform standard data processing tasks without accessing sensitive system resources or making unauthorized network connections. - [INDIRECT_PROMPT_INJECTION]: The skill ingests Cobertura XML data for analysis. It correctly treats this as data for calculation rather than instructions, using structured XML parsing to extract coverage metrics, which minimizes the risk of indirect prompt injection.
Audit Metadata