vitest-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional Markdown files and code examples for the Vitest testing framework. It does not introduce any new tools, scripts, or configurations that could be misused.
- [DATA_EXPOSURE]: Examples involving sensitive file paths, such as
/etc/passwd, are used strictly for educational purposes to demonstrate how to write robust input validation tests. There is no actual code implemented to access these paths. - [INDIRECT_PROMPT_INJECTION]: While the skill defines patterns for the agent to use when analyzing user-provided test files, it does not provide any automated execution capabilities or tools that would increase the attack surface for indirect prompt injection.
Audit Metadata