coverage-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code in
execute-rt.ccthat processes external data from a directory to measure fuzzing coverage. Ingestion points: Reads files from directory path provided inargv[1]. Boundary markers: None (standard harness design). Capability inventory:fopen,fread,malloc,opendir,readdir. Sanitization: Basic validation of file size and directory existence. - [DYNAMIC_EXECUTION]: The instructions automate the creation and execution of a local shell script (
generate_html) to generate HTML reports from coverage profile data. - [EXTERNAL_DOWNLOADS]: The skill uses standard package managers to install well-known development tools including
gcovr,cargo-binutils, andrustfiltfrom official registries.
Audit Metadata