test-gaps
Pass
Audited by Gen Agent Trust Hub on May 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@claude-flow/clipackage from the npm registry at runtime. - [COMMAND_EXECUTION]: Executes various CLI commands (
hooks coverage-gaps,hooks coverage-route,hooks coverage-suggest) via the Bash tool to analyze the project environment. - [PROMPT_INJECTION]: Analyzes project source code via the
--pathargument, which constitutes an indirect prompt injection surface where malicious content in processed files could attempt to influence the agent's output. - Ingestion points: Project files read via the
--pathparameter. - Boundary markers: None specified in the instructions to separate code content from instructions.
- Capability inventory: Access to Bash (npx), Read, and Grep tools.
- Sanitization: No explicit sanitization of file content is described before analysis.
Audit Metadata