Code Coverage with gcov
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill's primary workflow involves the ingestion and execution of untrusted data from the agent's environment.
- Ingestion points: The agent is instructed to read and process C/C++ source files and build configurations (Makefile, CMakeLists.txt).
- Boundary markers: Absent; there are no instructions for the agent to use sandboxing or to treat workspace files as untrusted.
- Capability inventory: The skill utilizes
gccfor compilation and requires the execution of resulting binaries (./program,./test_suite) as well as build tools (make,cmake). - Sanitization: Absent; the agent executes the build and test process directly.
- Command Execution (SAFE): The use of standard development tools like
gcc,gcov, andmakeis appropriate for the skill's stated purpose of measuring code coverage.
Audit Metadata