testland/coverage-diff-reporter
Builds a per-PR coverage delta report from any pair of LCOV / Cobertura / JSON coverage outputs (current run + baseline from the merge target) - emits a per-file table with line% / branch% deltas, called-out new files, hidden drops (overall +0.1pp but one file -8pp), and a single-line PR-comment summary. Use when the team has coverage in CI but needs human-readable PR feedback that points at the specific file the reviewer should focus on, not just an aggregate number.
63
79%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md step 5/7 runs `python scripts/coverage_diff.py current.json baseline.json > diff.md` where `current.json` and `baseline.json` are produced by parsing coverage artifacts (`parse_lcov.py coverage/lcov.info`, `baseline/lcov.info`) from the PR/merge-target CI, so outsider-authored text in coverage inputs can be ingested and rendered into the PR markdown report.
Where we found it
coverage artifacts (lcov.info)
content-type · 6 sites
Coverage artifacts (lcov.info) from PR CI runs contain file paths authored by outsiders; these are parsed, rendered into markdown (diff.md), and posted as a PR comment, enabling indirect prompt injection via crafted file paths.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The SKILL.md workflow examples invoke external GitHub Actions (dawidd6/action-download-artifact@v3 and marocchino/sticky-pull-request-comment@v2) which are fetched and executed at CI/runtime, so they represent remote code executed during the skill's runtime.
Where we found it
dawidd6/action-download-artifact@v3
dependency · 1 site
The plugin's workflow invokes this third-party GitHub Action at runtime to download baseline coverage artifacts, representing remote code execution from an external dependency.
SKILL.md
66
uses: dawidd6/action-download-artifact@v3
marocchino/sticky-pull-request-comment@v2
dependency · 1 site
The plugin's workflow invokes this third-party GitHub Action at runtime to post/update PR comments, representing remote code execution from an external dependency.
SKILL.md
210
uses: marocchino/sticky-pull-request-comment@v2
- Audited
- Security analysis