mutation-testing
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and reference materials from the author's official GitHub repository (
github.com/dmoka/skills). This is a standard resource for the skill's operation. - [COMMAND_EXECUTION]: The workflow involves running standard development commands and package managers, including
npm,pip,dotnet,mvn,cargo, andcomposer, to install mutation testing tools and execute project test suites. - [DYNAMIC_EXECUTION]: A subagent judging process involves generating and executing short, isolated code snippets (using
node -eorpython -c) to verify whether specific inputs can distinguish mutated code from the original source. - [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and tests to facilitate mutation analysis. As this content is passed to subagents for judging, it represents a theoretical surface for instructions embedded in the project code to influence the agent's behavior, although the instructions include specific safety constraints for the judging environment.
Audit Metadata