ac-coverage

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes a restricted set of read-only tools (Read, Grep, Glob) to perform static analysis of project files. This toolset is appropriate for its stated purpose of requirement-to-test mapping.
  • [SAFE]: No network operations, external downloads, or remote code execution patterns were detected. The skill operates entirely within the local filesystem.
  • [SAFE]: The skill references internal documentation and related tools (such as checkin-assistant and test-coverage-assistant) via relative paths within the vendor's directory structure, which is consistent with normal modular functionality.
  • [SAFE]: The skill follows standard development practices by defining clear annotation conventions (@AC, @SPEC, @implements) for its parsing logic. While it processes external data from code and specification files, the lack of dangerous capabilities (like shell execution or network requests) mitigates potential injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 09:14 PM