skills/axross/skills/vitest-testing/Gen Agent Trust Hub

vitest-testing

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because the agent is directed to ingest and act upon test execution results, including failure diffs, stack traces, and console logs.
  • Ingestion points: The agent reads failure details and console output to diagnose test regressions (found in 'references/running-as-an-agent.md').
  • Boundary markers: The skill recommends the 'minimal' reporter to reduce the volume of passing-test output, though it does not provide explicit prompt delimiters for the ingested log content.
  • Capability inventory: The agent is authorized to execute shell commands ('vitest run') and modify project files (configurations, source code, and snapshots).
  • Sanitization: There are no instructions for the agent to sanitize or escape the test output before it is processed as part of the conversation context.
  • [EXTERNAL_DOWNLOADS]: The skill mentions third-party extensions and provider packages required for specific Vitest features.
  • References third-party MCP servers such as '@madrus/vitest-mcp-server' and 'djankies/vitest-mcp' in 'references/running-as-an-agent.md'.
  • Includes a mandatory security instruction that human approval MUST be obtained before adding these third-party tools to a toolchain.
  • [COMMAND_EXECUTION]: The skill guides the agent in the operational use of the Vitest command-line interface.
  • Provides specific instructions for running 'vitest run' with various flags for filtering by path, name, or line number to optimize execution and output ('references/running-as-an-agent.md').
  • Includes diagnostic commands such as 'vitest list' and debugging flags like '--inspect-brk' ('references/debugging-and-failure-modes.md').
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 01:16 AM
Security Audit — agent-trust-hub — vitest-testing