coverlet
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development utilities, including
dotnetandripgrep(rg), to analyze project structures, install dependencies, and run tests. These commands are essential for the skill's primary function of managing code coverage. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
coverletsuite andReportGeneratorfrom the official .NET package registry (NuGet). It also provides examples for integrating with common CI services like GitHub Actions and Azure Pipelines using established, trusted tasks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process repository files (e.g.,
.csproj,.props,.runsettings) to identify existing coverage configurations. While this represents a surface for indirect prompt injection from potentially malicious project files, the skill limits the use of this data to configuration detection and does not interpolate external content into instructions in an unsafe manner. - [SAFE]: The skill exhibits no signs of prompt injection, credential exfiltration, or obfuscation. Its stated purpose aligns with its implemented behavior, following established best practices for .NET development.
Audit Metadata