vitest-testing-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard Vitest CLI commands for running tests, performance profiling, and environment validation, such as
vitest --runandvitest --browser. - [EXTERNAL_DOWNLOADS]: The skill references industry-standard Node.js packages including
vitest,playwright,webdriverio, and@testing-library/react. These are legitimate dependencies for the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files which provides an attack surface for instructions embedded in data.
- Ingestion points: Reads
package.json, configuration files (vite.config.js/ts), and test suites. - Boundary markers: No explicit instructions or delimiters are used to separate untrusted file content from agent instructions.
- Capability inventory: The skill executes shell commands via the
vitestCLI and reads local filesystem content. - Sanitization: No specific sanitization or filtering of ingested file content is described in the skill instructions.
Audit Metadata