skills/antfu/skills/vitest/Gen Agent Trust Hub

vitest

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for the Vitest testing framework, a well-known and trusted tool in the JavaScript ecosystem. No malicious patterns or security vulnerabilities were identified during analysis.- [REMOTE_CODE_EXECUTION]: The documentation includes standard commands for installing official Vitest-related packages from the npm registry (jsdom, happy-dom, and coverage providers). These are legitimate development dependencies.- [DATA_EXFILTRATION]: All network-related examples, such as API URLs or local server configurations, use placeholder values or localhost. No evidence of unauthorized data collection or exfiltration was found.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to interact with test files and outputs. While this represents a potential attack surface, the content is strictly focused on legitimate testing workflows and contains no instructions designed to bypass agent constraints or safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:03 PM