simplecov
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill's documentation and instructions do not contain any patterns intended to bypass safety filters, override system instructions, or extract sensitive model information.
- [DATA_EXFILTRATION]: No unauthorized data transmission or hardcoded credentials were found. The provided scripts interact strictly with local project files such as coverage reports and quality metrics.
- [REMOTE_CODE_EXECUTION]: The skill recommends standard, well-known Ruby gems (simplecov, rubycritic). It does not perform any remote script downloads or executions from untrusted sources.
- [COMMAND_EXECUTION]: The scripts utilize local command execution (e.g., via
system()or backticks) to run tests and quality analysis tools. These operations are transparent, documented, and essential for the skill's functionality as a development utility. - [SAFE]: The skill adheres to standard Ruby on Rails development practices. It provides legitimate value by automating test coverage tracking and quality reporting without introducing security risks.
Audit Metadata