configure-coverage
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of standard, well-known code coverage utilities. It uses
npm installto fetch@vitest/coverage-v8or@vitest/coverage-istanbul,uv addforpytest-cov, andcargo installforcargo-llvm-cov. These are official tools within their respective ecosystems.- [COMMAND_EXECUTION]: The skill utilizesBashto perform project discovery viafindandtestcommands, and to execute package managers for tool installation. These commands are localized to the project root and are necessary for the skill's primary function of configuring the development environment.- [SAFE]: The skill usesWebSearchandWebFetchsolely to retrieve the latest version information for coverage tools, which is a benign operation. CI/CD templates provided in the reference material point to well-known, trusted services like Codecov and official GitHub Actions (e.g.,actions/upload-artifact).- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found. The skill operates with transparent intent within the context of developer productivity.
Audit Metadata