test-coverage-improver
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution Patterns: The skill utilizes
pnpm test:coverageto generate and update coverage metrics. This is a common and appropriate use of the package manager for JavaScript development tasks within a verification sandbox. - Data Ingestion Surfaces: The workflow involves analyzing coverage reports such as
lcov.info,lcov-report/index.html, and JSON summaries. This represents a surface for ingesting technical data. - Ingestion points: The agent reads
coverage/coverage-summary.json,coverage/coverage-final.json,coverage/lcov.info, andcoverage/lcov-report/index.htmlas specified in the workflow. - Boundary markers: The skill does not explicitly define delimiters for these reports, though they are structured technical artifacts produced by standard tools.
- Capability inventory: The agent can execute
pnpm test:coverageand write test files to designated directories. - Sanitization: No specific sanitization of the report content is mentioned, as the data is primarily used to identify uncovered code paths rather than influencing logic flow.
- Security Boundaries: The instructions explicitly mention working within the repository's verification sandbox and following credential policies, indicating adherence to established security protocols.
Audit Metadata