Skip to content
Security
Command

/coverage

Run forge coverage, identify untested branches, generate tests to close gaps.

From plugin
rugproof
1145 skills23 agents45 commands4 hooks
> /plugin marketplace add omermaksutii/RugProof
> /plugin install rugproof@rugproof

Command definition

coverage.md
description: Run forge coverage, identify untested branches, generate tests to close gaps.
allowed-tools: Read, Write, Bash, Agent, mcp__forge-runner__*

/coverage — close test coverage gaps

Procedure

Step 1 — Run coverage

mcp__forge-runner__coverage(format=json)

Returns per-file branch / line / function coverage.

Step 2 — Identify gaps

For each file under `src/`:

  • Lines covered < 90%? Identify which lines.
  • Branches covered < 80%? Identify which branches.

Step 3 — Generate targeted tests

For each gap, generate a test that exercises the uncovered path. Lean on `/test-gen` infrastructure.

Common gap patterns:

  • Revert branches (`require` failure paths) — write a test that triggers the revert.
  • Conditional logic (`if (x > 10)`) — test both arms.
  • Loop edge cases (empty array, single element, max bound).

Step 4 — Re-run coverage

Verify the new tests close the gaps. Iterate.

Step 5 — Output

Coverage:
  Before:  src/Vault.sol      lines 78% / branches 71%
           src/Oracle.sol     lines 92% / branches 84%
  After:   src/Vault.sol      lines 96% / branches 88%   ✓
           src/Oracle.sol     lines 98% / branches 91%   ✓

Generated:
  test/generated/coverage/VaultGaps.t.sol     (12 tests)
  test/generated/coverage/OracleGaps.t.sol    (4 tests)

Notes

  • 100% line coverage is achievable. 100% branch coverage is harder; aim for 90%.
  • Some lines are intentionally untested (e.g. unreachable revert in storage-init). Allow `// rugproof-skip-coverage` inline.
  • Coverage is a *minimum*, not a measure of correctness. High coverage + no invariants is misleading.
Read more
@omermaksutii
Ships withrugproof

Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy

1152 skills23 agents
Get the whole plugin

Stars on GitHub

Momentum

stars in total
11
Star history of omermaksutii/RugProof on GitHub, a chart by star-history.com

Other commands on rugproof.

audit-deep

audit-deep

Command

Deep audit — same as /audit but spawns more parallel subagents, runs multi-pass review, and chases exploit chains across files.

@omermaksutii@omermaksutiiInstall Command
audit-deps

audit-deps

Command

Audit third-party dependencies — resolve installed versions, cross-reference known-vulnerable releases, and flag vendored code…

@omermaksutii@omermaksutiiInstall Command
audit-diff

audit-diff

Command

Diff two Rugproof audit reports (before vs after) to track regressions — what's new, what's fixed, and whether the grade moved.

@omermaksutii@omermaksutiiInstall Command
audit-history

audit-history

Command

Pull past public audits (Code4rena, Sherlock, Spearbit, etc.) for a deployed contract or known protocol.

@omermaksutii@omermaksutiiInstall Command
audit-live

audit-live

Command

Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for…

@omermaksutii@omermaksutiiInstall Command

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command