skills/ruvnet/ruflo/test-gaps/Gen Agent Trust Hub

test-gaps

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill executes npx @claude-flow/cli@latest, which downloads and runs the latest version of an external package from the public NPM registry at runtime.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run CLI commands for identifying coverage gaps, routing tasks, and generating test suggestions.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes project source code to detect missing tests. This creates a surface where malicious instructions embedded in the analyzed code could attempt to influence the agent's behavior.
  • Ingestion points: Project source code files accessed via the --path argument and analyzed by the coverage hooks.
  • Boundary markers: The skill does not define specific delimiters or instructions to the agent to ignore instructions found within the analyzed files.
  • Capability inventory: The skill has access to shell execution (Bash), file reading (Read), and MCP worker dispatching.
  • Sanitization: There is no evidence of content sanitization or validation before the code is processed for test gap detection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:38 AM