jest
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references installation of numerous official packages from the npm registry, such as
jest,ts-jest,babel-jest, and@testing-library/react. These are well-known, industry-standard testing tools. - [COMMAND_EXECUTION]: The skill provides templates for common developer workflows, including running test suites via CLI and npm scripts. It also includes examples of custom setup and teardown scripts for complex environments (e.g., Puppeteer or MongoDB presets), which demonstrate standard orchestration patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces where an agent might process external, untrusted data during the course of testing.
- Ingestion points: Browser automation via
page.goto(Puppeteer.md) and API interaction viahttp.get(TutorialAsync.md). - Boundary markers: Not present in provided documentation templates.
- Capability inventory: Arbitrary JavaScript execution within the test environment, including filesystem access (mkdir/writeFile in Puppeteer setup.js) and worker process management.
- Sanitization: None present in the provided templates; users are expected to implement their own validation logic.
Audit Metadata