vitest-runner
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from test outputs and configuration files, creating a potential surface for indirect prompt injection if those files contain malicious instructions. * Ingestion points: Reads project files such as
package.jsonandvitest.config.*, and captures stdout/stderr fromnpx vitestin SKILL.md. * Boundary markers: The instructions require formatting results into a structured report using clear headers and delimiters. * Capability inventory: EmploysBashfor command execution andReadfor file access. * Sanitization: No specific filtering or sanitization of test failure messages is described before reporting.
Audit Metadata