vitest
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents a framework that inherently executes user-provided JavaScript/TypeScript code.
- Ingestion points: Test files (e.g.,
math.test.ts) and configuration files (vitest.config.ts) are processed by the Vitest engine. - Boundary markers: None; the framework is designed to execute code provided in these files.
- Capability inventory: The skill documents capabilities including file system access (for snapshots), network operations (for API testing), and subprocess execution.
- Sanitization: Not applicable; user-provided test logic is executed within the project environment.
- [PERSISTENCE]: The documentation provides instructions for setting up shell autocompletions, which involves modifying a user's shell profile.
- Evidence: Found in
references/guide/cli.md, recommending the addition ofsource <(vitest complete zsh)to~/.zshrc. This is a standard and legitimate practice for providing CLI tool autocompletions for developers.
Audit Metadata