build-test-suite
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
covalCLI to perform administrative tasks such as listing agents, retrieving agent details, and creating test sets and cases. These commands are legitimate operations within the context of the Coval platform. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://api.coval.devusingcurlto create test cases programmatically. As these requests target the official API of the skill's author (coval-ai), they are documented as safe vendor-related operations. - [CREDENTIALS_UNSAFE]: Authentication is handled securely. The skill guides users to use
coval loginor the$COVAL_API_KEYenvironment variable, avoiding the use of hardcoded secrets and following industry standards for secret management. - [PROMPT_INJECTION]: The skill processes user-provided scenario text but implements safety guidance by recommending single quotes in shell commands to prevent unintended shell interpolation of special characters within test case inputs.
Audit Metadata