coverage-drop-investigator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements a legitimate workflow for analyzing code coverage regressions using standard development practices and tools.\n- [EXTERNAL_DOWNLOADS]: The skill references npx jest to execute tests and generate coverage reports. Jest is a well-known, trusted testing framework in the Node.js ecosystem, and its use here is consistent with the skill's stated purpose.\n- [COMMAND_EXECUTION]: Local bash, git, and jq commands are used to process project data and compare branch states. These operations are performed locally on the user's workspace to identify uncovered code paths and do not involve unauthorized data access or network exfiltration.
Audit Metadata