mutation-testing
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of mutation testing tools from official repositories and package registries, such as mutmut from PyPI, Stryker from NPM, and go-mutesting from GitHub. These are well-known, industry-standard tools for the stated purpose.
- [COMMAND_EXECUTION]: Instructs the agent to execute shell commands for tool installation and running mutation tests (e.g., 'pip install mutmut', 'npx stryker run', 'mvn pitest:mutationCoverage'). These operations are required for the intended functionality and follow standard developer workflows.
- [PROMPT_INJECTION]: The skill processes source code files and test results to identify weak tests, which creates an indirect prompt injection surface.
- Ingestion points: Local source code directories and files specified in tool configurations (e.g., 'src/', 'pricing.py').
- Boundary markers: Absent; the skill does not explicitly use delimiters to wrap external code content during processing.
- Capability inventory: Shell command execution capabilities are used to run testing tools and view their outputs.
- Sanitization: No explicit sanitization or filtering of the ingested source code is performed before analysis.
Audit Metadata