test-coverage-improver
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill instructions include running shell commands such as
make coverageanduv run coverage report -mto measure and report on test coverage. These are standard operations within a development environment and are consistent with the skill's purpose of coverage measurement and improvement. - [Indirect Prompt Injection Surface]: The skill processes external data from artifacts like
.coverageandcoverage.xmlto identify testing gaps. - Ingestion points: The skill reads
.coverageandcoverage.xmlfiles inSKILL.mdStep 1 and 2. - Boundary markers: No explicit delimiters are specified for these file contents.
- Capability inventory: The agent can execute
make coverage,uv run, and edit source code (Step 4). - Sanitization: No specific sanitization logic is described for the coverage report content. While ingestion of external files is a potential surface for indirect prompt injection, it is the primary function of the skill and is handled within the context of a structured coverage analysis workflow.
Audit Metadata