configure-coverage

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of standard, well-known code coverage utilities. It uses npm install to fetch @vitest/coverage-v8 or @vitest/coverage-istanbul, uv add for pytest-cov, and cargo install for cargo-llvm-cov. These are official tools within their respective ecosystems.- [COMMAND_EXECUTION]: The skill utilizes Bash to perform project discovery via find and test commands, and to execute package managers for tool installation. These commands are localized to the project root and are necessary for the skill's primary function of configuring the development environment.- [SAFE]: The skill uses WebSearch and WebFetch solely to retrieve the latest version information for coverage tools, which is a benign operation. CI/CD templates provided in the reference material point to well-known, trusted services like Codecov and official GitHub Actions (e.g., actions/upload-artifact).- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found. The skill operates with transparent intent within the context of developer productivity.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 01:01 PM