test-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- Command Execution: The skill identifies and executes test commands found in project manifests, such as
dotnet run. This is used to verify whether code changes are detected by tests. - Indirect Prompt Injection Surface: The skill processes source code files (Ingestion points: production and test files). It uses a narrow scope and outcome allowlists (Boundary markers: present). It has the ability to read, write, and execute files (Capability inventory: file read/write, shell command execution). No specific sanitization logic is mentioned for the ingested code content (Sanitization: absent).
- Dynamic Code Modification: The skill applies temporary mutations to source code to verify test coverage. The instructions provide safeguards by requiring immediate reversal of all changes.
Audit Metadata