vitest
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for the Vitest testing framework, a well-known and trusted tool in the JavaScript ecosystem. No malicious patterns or security vulnerabilities were identified during analysis.- [REMOTE_CODE_EXECUTION]: The documentation includes standard commands for installing official Vitest-related packages from the npm registry (jsdom, happy-dom, and coverage providers). These are legitimate development dependencies.- [DATA_EXFILTRATION]: All network-related examples, such as API URLs or local server configurations, use placeholder values or localhost. No evidence of unauthorized data collection or exfiltration was found.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to interact with test files and outputs. While this represents a potential attack surface, the content is strictly focused on legitimate testing workflows and contains no instructions designed to bypass agent constraints or safety filters.
Audit Metadata