reportgenerator
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the 'dotnet-reportgenerator-globaltool' package from the official NuGet registry and references the tool's public GitHub repository.- [COMMAND_EXECUTION]: The skill utilizes shell commands to install the necessary tool via the .NET CLI and execute the report generation process.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted coverage data which presents an indirect injection surface. * Ingestion points: Coverage artifacts (e.g., Cobertura, OpenCover, lcov files) processed by the tool. * Boundary markers: Not present; the skill lacks explicit markers to differentiate between instructions and data in the input files. * Capability inventory: Executes CLI tools and writes generated HTML/Markdown reports to the local file system. * Sanitization: The skill does not explicitly sanitize the input data, relying on the third-party tool's internal parsing.
Audit Metadata