mutation-testing

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses shell commands such as git diff and rg to inspect project files and determine which source files have changed.
  • [EXTERNAL_DOWNLOADS]: Recommends initializing the project with stryker using npm init stryker@latest, which downloads the tool from the official NPM registry.
  • [REMOTE_CODE_EXECUTION]: Executes the project's own test suite through the Stryker CLI tool to identify surviving mutants.
  • [PROMPT_INJECTION]: Evaluated as a potential surface for indirect prompt injection. Ingestion points: Reads project source files and test reports via git diff and rg in SKILL.md. Boundary markers: None identified. Capability inventory: Executes shell commands (npm, stryker) and provides instructions for modifying project files to strengthen tests. Sanitization: None identified.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 04:25 PM
Security Audit — agent-trust-hub — mutation-testing