vitest

SUSPICIOUS: the skill is mostly a benign documentation guide for Vitest migration, and its npm/npx examples are proportionate to that purpose. However, the included advice to fetch and execute migration shell scripts from unverifiable placeholder raw GitHub URLs is an install-trust inconsistency that raises medium supply-chain risk, though there is no evidence of credential theft, covert exfiltration, or malicious code execution embedded in the skill itself.