coverlet

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard development utilities, including dotnet and ripgrep (rg), to analyze project structures, install dependencies, and run tests. These commands are essential for the skill's primary function of managing code coverage.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the coverlet suite and ReportGenerator from the official .NET package registry (NuGet). It also provides examples for integrating with common CI services like GitHub Actions and Azure Pipelines using established, trusted tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process repository files (e.g., .csproj, .props, .runsettings) to identify existing coverage configurations. While this represents a surface for indirect prompt injection from potentially malicious project files, the skill limits the use of this data to configuration detection and does not interpolate external content into instructions in an unsafe manner.
  • [SAFE]: The skill exhibits no signs of prompt injection, credential exfiltration, or obfuscation. Its stated purpose aligns with its implemented behavior, following established best practices for .NET development.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 08:58 AM