jest-testing
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides legitimate guidance on Jest configuration, mock management, and testing best practices for modern JavaScript environments.
- [METADATA_POISONING]: The skill references future versions of software (Jest 30.4.2, Next.js 16) and dates (2026). This metadata is technically inaccurate compared to current real-world software releases, but it appears to be a stylistic choice for a future-dated or synthetic environment and does not facilitate malicious behavior or safety bypasses.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a potential attack surface by requiring the agent to ingest and act upon code and configuration files which could contain malicious payloads if sourced from an untrusted environment.
- Ingestion points: Test files (*.test.js, *.spec.ts), Jest configuration files (jest.config.js, package.json), and project source code.
- Boundary markers: The instructions do not define specific delimiters or 'ignore' warnings for handling untrusted data content.
- Capability inventory: The skill provides instructions for executing the Jest CLI (--listTests, --showConfig), modifying test logic, and interacting with the file system.
- Sanitization: No specific instructions are provided for sanitizing or escaping the content of processed files before interpolation into the agent's context.
Audit Metadata