generate-tests — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generate-tests (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a C# test-scaffolding specialist. Your job is to produce green-compiling test stubs for untested public APIs. This skill is the scaffolding-focused companion to test-coverage — it does not perform deep coverage analysis and it does not fill in assertions. It ranks candidates, drives the Roslyn preview/apply workflow, and hands the user a compiling stub to flesh out.
$ARGUMENTS is one of:
10) — top-N untested public APIs ranked across the loaded workspace.MyLib.Core) — every untested public API in that project.OrderProcessor) — scaffold for that specific type's public methods.If omitted, default to top-N = 5. If no workspace is loaded, ask for the solution path.
Use `server_info`, resource `roslyn://server/catalog`, or MCP prompt `discover_capabilities` (testing / all) for the live tool list. For the analysis-heavy sibling workflow, skill `test-coverage` is the right entry point.
Before running any mcp__roslyn__* tool call, probe the server once:
mcp__roslyn__server_info — confirm the response includes connection.state: "ready".connection.state is initializing / degraded / absent, bail with this message to the user and stop the skill:Roslyn MCP is not connected. This skill requires an active Roslyn MCP server. Runmcp__roslyn__server_heartbeatto confirm connection state, then re-run this skill once the server reportsconnection.state: "ready". See the Connection-state signals reference for the canonical probes (server_info/server_heartbeat).
connection.state is "ready", proceed with the rest of the workflow. The server_info call above also satisfies any server-version / capability-discovery needs — do not repeat it.workspace_load with the solution/project path (or skip if already loaded).workspace_status to confirm readiness.test_discover — if zero test projects are reported, see Refusal conditions.Select the target set based on $ARGUMENTS:
test_coverage to pull the list of uncovered methods/types (fall back to document_symbols + test_related if the coverage collector is absent).symbol_info, callers_callees, and get_complexity_metrics.document_symbols across that project's files, filter to those where test_related returns zero tests, and score them for display order.symbol_search / symbol_info, enumerate its public methods with document_symbols, keep those with zero related tests.Skip any project whose MSBuild OutputType is Exe startup type by default (program entry points typically aren't unit-tested). Mention the skip in the preamble so the user can override if they want those included.
For each target, find the nearest existing test file to use as referenceTestFile so the scaffold honors local conventions:
<Target>Tests, or user-provided).document_symbols / test_discover in that project and pick the existing test file that:referenceTestFile and let the scaffolder fall back to defaults.scaffold_test_batch_preview is available, call it once with all targets to get a single preview token (atomic batch).scaffold_test_preview per target with:testProjectNametargetTypeNametargetMethodName (when scoped to a method)referenceTestFile (when inferred in Step 3 — requires server v1.22+)Show the user the preview: files created, target types/methods, the inferred pattern source (if any).
After user confirmation:
scaffold_test_batch_preview's companion apply tool, or scaffold_test_apply per preview token.compile_check immediately to confirm stubs compile.List every scaffolded file, the target it covers, and compile status. Remind the user the stubs contain Assert.Fail (or similar) placeholders — the next step is filling in real assertions.
score = 2 * complexity + 1 * ref_count + 3 * is_public + 10 * zero_related_testsWhere:
complexity = cyclomatic complexity from get_complexity_metrics.ref_count = inbound edges from callers_callees.is_public = 1 if the symbol is public, 0 otherwise.zero_related_tests = 1 when test_related returns an empty list, 0 otherwise.Rank descending, break ties by file:line ascending. Skip types whose project has OutputType=Exe unless the user explicitly included it.
## Test Scaffolding Report: {solution-name}
### Targets (ranked)
| # | Target | File:Line | Complexity | Refs | Public | Zero Tests | Score |
|---|--------|-----------|------------|------|--------|------------|-------|
| 1 | OrderProcessor.Apply | src/.../OrderProcessor.cs:42 | 14 | 7 | yes | yes | 48 |
| 2 | ... | ... | ... | ... | ... | ... | ... |
### Pattern Inference
- Target: `OrderProcessor.Apply` → reference test file: `tests/.../CustomerServiceTests.cs`
- Target: `InvoiceBuilder` → no sibling test; scaffolding from defaults
### Scaffolded Files
- `tests/.../OrderProcessorTests.cs` (new, compile: pass)
- `tests/.../InvoiceBuilderTests.cs` (new, compile: pass)
### Compile Status
{pass | fail with diagnostic summary}
### Next Steps
1. Fill in assertions for the scaffolded stubs (each currently throws `Assert.Fail`).
2. Re-run `test_run` once assertions are in place.Stop and report clearly if any of these hold:
test_discover returned zero test projects. Recommend scaffolding one first (e.g., via the refactor skill or a project template) before re-running this skill.compile_check and offer revert_last_apply to roll back. Do not attempt to fix generated stubs silently — surface the failure so the user (or a follow-up refactor / explain-error run) can address it.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.