coverage-debt-tracker
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's CI workflow downloads coverage history artifacts from previous runs using official GitHub Actions. This is a standard procedure for historical analysis.
- [COMMAND_EXECUTION]: The Python script uses the subprocess module to run git log for churn analysis. It correctly uses a list of arguments to avoid shell injection vulnerabilities.
- [SAFE]: Analysis of indirect prompt injection surface. The skill ingests data from coverage-history/*.json files (Ingestion points). No explicit boundary markers or sanitization are used, but the capabilities (Capability inventory) are limited to reporting and standard git operations, posing no significant risk.
Audit Metadata