The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs .NET global tools and adds NuGet packages to the environment. Specifically, it uses dotnet tool install --global for dotnet-coverage and dotnet-reportgenerator-globaltool, and dotnet add package for coverlet.collector. These are well-known developer tools fetched from public registries.
[COMMAND_EXECUTION]: The skill instructs the agent to run dotnet test to collect coverage data. This triggers the execution of the project's test suite, which represents an arbitrary code execution risk if the codebase being analyzed is untrusted or malicious.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from source code files and Cobertura XML reports to parse complexity and coverage metrics. There is a potential attack surface where specially crafted content in these files could attempt to influence the agent's analysis or generated recommendations.
[DYNAMIC_EXECUTION]: To ensure mathematical accuracy, the skill directs the agent to perform CRAP score calculations using a calculator or by generating and executing a script at runtime, which involves dynamic code generation.

crap-score