vitest
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the legitimate use of Vitest, a well-known testing framework. It contains no instructions that attempt to bypass safety filters or exfiltrate sensitive data.
- [EXTERNAL_DOWNLOADS]: The documentation references standard installations of peer dependencies such as
jsdom,happy-dom, and official Vitest coverage providers (@vitest/coverage-v8). These are well-known and trusted packages in the JavaScript ecosystem. - [COMMAND_EXECUTION]: The skill provides instructions for using the
vitestcommand-line interface. These commands are standard for test runners and do not involve unauthorized privilege escalation or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The skill documentation includes examples of how the agent should process test files and configuration. While these files represent an external data surface, the instructions are focused on standard testing functionality and include no patterns intended to exploit the agent's behavior. Ingestion points include test files and configuration; boundary markers are not explicitly defined in the documentation; capabilities include CLI execution and file system operations for snapshots; sanitization logic is handled by the framework's standard environment isolation.
Audit Metadata