vitest
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the Vitest CLI and its various commands (e.g.,
vitest,vitest run,vitest bench) for executing test suites. These are standard developer tools used for unit and integration testing. - [EXTERNAL_DOWNLOADS]: The documentation references standard, well-known Node.js packages used with Vitest, such as
jsdom,happy-dom, and official coverage providers (@vitest/coverage-v8), which are installed from the public npm registry. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where the agent interacts with and executes code from the workspace (tests).
- Ingestion points: Workspace test files and Vitest configuration files.
- Boundary markers: Relies on structured test definitions like
describeandtestblocks to scope execution. - Capability inventory: Access to CLI execution, file system writes (for snapshots), and network operations if tests are designed to perform them.
- Sanitization: Documents framework features like test isolation (via threads or forks) and mocking utilities (
vi.mock,vi.stubGlobal) that can be used to control the test environment. - [SAFE]: No obfuscation, credential harvesting, or unauthorized persistence mechanisms were identified. The content is consistent with official documentation for the Vitest framework.
Audit Metadata