mutation-testing
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration metadata and version information from official, well-known package registries including the Gradle Plugin Portal and Maven Central (
repo1.maven.org). These operations are used exclusively for pinning dependencies to their latest stable releases. - [COMMAND_EXECUTION]: The skill uses standard build tool commands (
./gradlew pitest) and basic file system operations (grep,sed,rm) to manage the mutation testing lifecycle. It also includes a Python script to parse XML reports and provide summaries to the user. - [CREDENTIALS_UNSAFE]: The skill correctly advises the use of
.envfiles for secret management in its internal logic documentation, which is considered a safe and standard practice. - [INDIRECT_PROMPT_INJECTION]: The skill processes JUnit test results and PIT XML reports. While this represents an ingestion surface for external data, the skill is scoped to developer-oriented tasks with standard output sanitization through its summary script.
Audit Metadata