skills/jetbrains/skills/vitest/Gen Agent Trust Hub

vitest

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the Vitest CLI and its various commands (e.g., vitest, vitest run, vitest bench) for executing test suites. These are standard developer tools used for unit and integration testing.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard, well-known Node.js packages used with Vitest, such as jsdom, happy-dom, and official coverage providers (@vitest/coverage-v8), which are installed from the public npm registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where the agent interacts with and executes code from the workspace (tests).
  • Ingestion points: Workspace test files and Vitest configuration files.
  • Boundary markers: Relies on structured test definitions like describe and test blocks to scope execution.
  • Capability inventory: Access to CLI execution, file system writes (for snapshots), and network operations if tests are designed to perform them.
  • Sanitization: Documents framework features like test isolation (via threads or forks) and mocking utilities (vi.mock, vi.stubGlobal) that can be used to control the test environment.
  • [SAFE]: No obfuscation, credential harvesting, or unauthorized persistence mechanisms were identified. The content is consistent with official documentation for the Vitest framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:24 PM