ptlam-testing-typescript
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute Vitest CLI commands for test execution, coverage reporting, and listing test metadata. These operations are standard for the intended development workflow and rely on repository-established scripts.
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of standard TypeScript testing dependencies, including
@vitest/coverage-v8,@vitest/coverage-istanbul, and@vitest/ui, from the npm registry. These references target well-known packages from a recognized service. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of processing external data.
- Ingestion points: The agent is instructed to read production code, manifests, and existing test files from the user's repository (SKILL.md, Section 2).
- Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted repository content from the agent's internal instructions.
- Capability inventory: The agent has the authority to execute shell commands via the Vitest CLI and to create or modify files within the project scope (references/running-vitest.md, write-and-fix.md).
- Sanitization: The instructions do not define any sanitization, filtering, or validation steps for the code being analyzed.
Audit Metadata