test-coverage-improver

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution Patterns: The skill utilizes pnpm test:coverage to generate and update coverage metrics. This is a common and appropriate use of the package manager for JavaScript development tasks within a verification sandbox.
  • Data Ingestion Surfaces: The workflow involves analyzing coverage reports such as lcov.info, lcov-report/index.html, and JSON summaries. This represents a surface for ingesting technical data.
  • Ingestion points: The agent reads coverage/coverage-summary.json, coverage/coverage-final.json, coverage/lcov.info, and coverage/lcov-report/index.html as specified in the workflow.
  • Boundary markers: The skill does not explicitly define delimiters for these reports, though they are structured technical artifacts produced by standard tools.
  • Capability inventory: The agent can execute pnpm test:coverage and write test files to designated directories.
  • Sanitization: No specific sanitization of the report content is mentioned, as the data is primarily used to identify uncovered code paths rather than influencing logic flow.
  • Security Boundaries: The instructions explicitly mention working within the repository's verification sandbox and following credential policies, indicating adherence to established security protocols.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 03:54 AM
Security Audit — agent-trust-hub — test-coverage-improver