jest-vitest

SUSPICIOUS: the core Jest/Vitest guidance is benign and well-scoped, but the companion-check section expands scope by enumerating local skill directories and instructing transitive installation of additional skills from an unrelated third-party repo. The main risk is trust extension, not direct malware behavior.