qa-vitest-writer
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructional content and reference documentation for the Vitest testing framework. It encourages standard development practices and includes migration guides from Jest. No indicators of malicious activity such as credential harvesting, remote code execution, or unauthorized network activity were found.\n- [PROMPT_INJECTION]: The skill involves the ingestion of external data (test specifications and requirements) to generate code. While this represents an attack surface for indirect prompt injection, it is the primary intended purpose of the skill and is handled within the scope of code generation.\n
- Ingestion points: Reads test cases from specifications, requirements docs, or manual test designs (SKILL.md).\n
- Boundary markers: The instructions do not define specific delimiters for separating untrusted input from the system prompt.\n
- Capability inventory: The skill is designed to write test files to a specified directory (
tests/unit) and utilizes standard mocking/assertion tools; it does not request network access or execute arbitrary system commands (SKILL.md).\n - Sanitization: There are no explicit instructions for the agent to sanitize or validate the content of the ingested test cases.
Audit Metadata