analyzing-test-coverage
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes test files (*.test.ts) and coverage reports, representing an attack surface where malicious instructions could be embedded in data processed by the agent.
- Ingestion points: Local files and modules read via Read, Grep, and Glob tools.
- Capability inventory: The agent can modify files through Write/Edit and execute tests via pnpm test.
- Boundary markers: The skill does not provide specific directives or delimiters to ensure the agent ignores embedded instructions within the code it analyzes.
- Sanitization: No content validation or sanitization routines are specified for the analyzed test data.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation for Vitest (vitest.dev) and Mock Service Worker (mswjs.io). These are well-known and trusted developer resources.
- [COMMAND_EXECUTION]: The skill utilizes pnpm test and npx tsc for validating and running tests. The Bash tool is appropriately restricted to test-specific scripts (pnpm test:*) via allowed-tools configuration.
- [DYNAMIC_EXECUTION]: The skill facilitates the generation of test files from patterns and their subsequent execution using the Vitest runner. This adheres to standard developer workflows for test-driven development.
Audit Metadata