skills/dmoka/skills/mutation-testing/Gen Agent Trust Hub

mutation-testing

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation and reference materials from the author's official GitHub repository (github.com/dmoka/skills). This is a standard resource for the skill's operation.
  • [COMMAND_EXECUTION]: The workflow involves running standard development commands and package managers, including npm, pip, dotnet, mvn, cargo, and composer, to install mutation testing tools and execute project test suites.
  • [DYNAMIC_EXECUTION]: A subagent judging process involves generating and executing short, isolated code snippets (using node -e or python -c) to verify whether specific inputs can distinguish mutated code from the original source.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and tests to facilitate mutation analysis. As this content is passed to subagents for judging, it represents a theoretical surface for instructions embedded in the project code to influence the agent's behavior, although the instructions include specific safety constraints for the judging environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 11:21 AM