skills/ruvnet/ruflo/test-gaps/Gen Agent Trust Hub

test-gaps

Pass

Audited by Gen Agent Trust Hub on May 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @claude-flow/cli package from the npm registry at runtime.
  • [COMMAND_EXECUTION]: Executes various CLI commands (hooks coverage-gaps, hooks coverage-route, hooks coverage-suggest) via the Bash tool to analyze the project environment.
  • [PROMPT_INJECTION]: Analyzes project source code via the --path argument, which constitutes an indirect prompt injection surface where malicious content in processed files could attempt to influence the agent's output.
  • Ingestion points: Project files read via the --path parameter.
  • Boundary markers: None specified in the instructions to separate code content from instructions.
  • Capability inventory: Access to Bash (npx), Read, and Grep tools.
  • Sanitization: No explicit sanitization of file content is described before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
May 24, 2026, 10:21 AM
Security Audit — agent-trust-hub — test-gaps