mutation-testing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions to download and install mutation testing frameworks from official package registries. Examples include installing
@stryker-mutator/corevia npm andmutmutvia pip. These resources originate from well-known community repositories and are appropriate for the skill's purpose. - [COMMAND_EXECUTION]: The skill includes shell commands to initialize and execute mutation testing tools, such as
npx stryker run,mutmut run, andmvn ... mutationCoverage. These commands are standard for performing mutation analysis and do not involve unauthorized privilege escalation or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for analyzing source code and generating test scaffolding, which constitutes a potential surface for indirect prompt injection if the processed source files contain malicious instructions.
- Ingestion points: Source code files processed by mutation testing tools or the test scaffolding script (
scripts/scaffold-tests.sh). - Boundary markers: No specific boundary markers or instructions to ignore embedded content were found in the provided templates.
- Capability inventory: The agent is guided to execute package managers (npm, pip, mvn) and testing tools that interact with the local file system.
- Sanitization: The provided scripts do not include explicit input validation or sanitization of the source code content being analyzed.
Audit Metadata