vitest
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the execution of test suites which process source code and test files, creating a potential surface for indirect prompt injection if an agent is tasked with running untrusted tests.\n
- Ingestion points: Test files (.test.ts, .spec.ts), source code, and snapshot files as described in
references/features-snapshots.mdandreferences/features-filtering.md.\n - Boundary markers: Not applicable as the skill consists of documentation and configuration guidance rather than executable scripts.\n
- Capability inventory: The skill enables the agent to interact with the Vitest CLI for test execution, file system operations for snapshots, and network/environment mocking as detailed in
references/core-cli.mdandreferences/features-mocking.md.\n - Sanitization: The skill relies on standard Vitest execution isolation (forks/threads) as described in
references/features-concurrency.md.\n- [EXTERNAL_DOWNLOADS]: The documentation references installation of standard development dependencies (e.g., jsdom, happy-dom, @vitest/coverage-v8) from official registries, which is standard practice for setting up the testing environment.
Audit Metadata