generate-tests — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generate-tests (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a C# test-scaffolding specialist. Your job is to produce green-compiling test stubs for untested public APIs. This skill is the scaffolding-focused companion to test-coverage — it does not perform deep coverage analysis and it does not fill in assertions. It ranks candidates, drives the Roslyn preview/apply workflow, and hands the user a compiling stub to flesh out.
$ARGUMENTS is one of:
10) — top-N untested public APIs ranked across the loaded workspace.MyLib.Core) — every untested public API in that project.OrderProcessor) — scaffold for that specific type's public methods.If omitted, default to top-N = 5. If no workspace is loaded, ask for the solution path.
Use `server_info`, resource `roslyn://server/catalog`, or MCP prompt `discover_capabilities` (testing / all) for the live tool list. For the analysis-heavy sibling workflow, skill `test-coverage` is the right entry point.
Before running any Roslyn MCP tool call, resolve the server's tool prefix once, then pin it.
The prefix is client-assigned — never hard-code it. Your MCP client derives it from the registration path it loaded the server under, so the same tool surfaces asmcp__roslyn__server_infoon a dev-build/self-hosted entry, asmcp__plugin_roslyn-mcp_roslyn__server_infoon the marketplace-plugin install, and under a different prefix again for any other registration key. Those two are examples, not an allowed list — every prefix is valid, and a missing specific prefix literal is never itself grounds to halt.
server_info. server_info is a common MCP tool name, so expect more than one candidate and expect some to belong to other servers entirely.server_info response carries connection.state, catalogVersion, and surface.*. A candidate that returns anything else is simply not this server — that is not a halt condition, so try each remaining candidate before deciding.find_references and get_symbol_outline), and matching it would silently attribute another server's results to Roslyn.connection.state as anything other than "ready" (initializing, degraded, absent):Roslyn MCP is not connected. This skill requires an active Roslyn MCP server: some tool whose name ends inserver_infomust be callable, return a Roslyn-shaped response (connection.state,catalogVersion,surface.*), and reportconnection.state: "ready". The prefix does not matter — your client assigns it from the registration path, so it may bemcp__roslyn__…,mcp__plugin_roslyn-mcp_roslyn__…, or anything else. Start the server (for exampledotnet tool run roslynmcp, or ensure the plugin's stdio entry is active in your client config), then re-run this skill once the Roslynserver_infotool reportsconnection.state: "ready"under whichever prefix your tool surface exposes. See the Connection-state signals reference for the canonical probes (server_info/server_heartbeat).
server_info call above also satisfies any server-version / capability-discovery needs — do not repeat it.workspace_load with the solution/project path (or skip if already loaded).workspace_status to confirm readiness.test_discover — if zero test projects are reported, see Refusal conditions.Select the target set based on $ARGUMENTS:
test_coverage to pull the list of uncovered methods/types (fall back to document_symbols + test_related if the coverage collector is absent).symbol_info, callers_callees, and get_complexity_metrics.document_symbols across that project's files, filter to those where test_related returns zero tests, and score them for display order.symbol_search / symbol_info, enumerate its public methods with document_symbols, keep those with zero related tests.Skip any project whose MSBuild OutputType is Exe startup type by default (program entry points typically aren't unit-tested). Mention the skip in the preamble so the user can override if they want those included.
For each target, find the nearest existing test file to use as referenceTestFile so the scaffold honors local conventions:
<Target>Tests, or user-provided).document_symbols / test_discover in that project and pick the existing test file that:referenceTestFile and let the scaffolder fall back to defaults.scaffold_test_batch_preview is available, call it once with all targets to get a single preview token (atomic batch).scaffold_test_preview per target with:testProjectNametargetTypeNametargetMethodName (when scoped to a method)referenceTestFile (when inferred in Step 3 — requires server v1.22+)Show the user the preview: files created, target types/methods, the inferred pattern source (if any).
After user confirmation:
scaffold_test_batch_preview's companion apply tool, or scaffold_test_apply per preview token.compile_check immediately to confirm stubs compile.List every scaffolded file, the target it covers, and compile status. Remind the user the stubs contain Assert.Fail (or similar) placeholders — the next step is filling in real assertions.
score = 2 * complexity + 1 * ref_count + 3 * is_public + 10 * zero_related_testsWhere:
complexity = cyclomatic complexity from get_complexity_metrics.ref_count = inbound edges from callers_callees.is_public = 1 if the symbol is public, 0 otherwise.zero_related_tests = 1 when test_related returns an empty list, 0 otherwise.Rank descending, break ties by file:line ascending. Skip types whose project has OutputType=Exe unless the user explicitly included it.
## Test Scaffolding Report: {solution-name}
### Targets (ranked)
| # | Target | File:Line | Complexity | Refs | Public | Zero Tests | Score |
|---|--------|-----------|------------|------|--------|------------|-------|
| 1 | OrderProcessor.Apply | src/.../OrderProcessor.cs:42 | 14 | 7 | yes | yes | 48 |
| 2 | ... | ... | ... | ... | ... | ... | ... |
### Pattern Inference
- Target: `OrderProcessor.Apply` → reference test file: `tests/.../CustomerServiceTests.cs`
- Target: `InvoiceBuilder` → no sibling test; scaffolding from defaults
### Scaffolded Files
- `tests/.../OrderProcessorTests.cs` (new, compile: pass)
- `tests/.../InvoiceBuilderTests.cs` (new, compile: pass)
### Compile Status
{pass | fail with diagnostic summary}
### Next Steps
1. Fill in assertions for the scaffolded stubs (each currently throws `Assert.Fail`).
2. Re-run `test_run` once assertions are in place.Stop and report clearly if any of these hold:
test_discover returned zero test projects. Recommend scaffolding one first (e.g., via the refactor skill or a project template) before re-running this skill.compile_check and offer revert_last_apply to roll back. Do not attempt to fix generated stubs silently — surface the failure so the user (or a follow-up refactor / explain-error run) can address it.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.