detect-coverage-gap
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of high-level analytical instructions and metadata. No executable code, shell scripts, or external dependencies are defined.
- [SAFE]: No network operations, data exfiltration patterns, or sensitive file access were detected. The skill operates on data provided within the agent's context.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (coverage evidence and representations), which is a potential ingestion surface. However, the skill lacks any capabilities (such as file writing, network requests, or command execution) that could be exploited via malicious input. As a purely informational analysis tool, the risk is negligible.
- Ingestion points: Inputs defined in the contract (coverage_evidence, coverage_representation, universe_definition) in SKILL.md.
- Boundary markers: None explicitly defined in the prompt text.
- Capability inventory: No tool invocations, shell commands, or network operations are present in the skill.
- Sanitization: Not specified, but standard for analytical tasks.
Audit Metadata