vitest-unit-testing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running Vitest tests via
pnpmand a command-line runner (referred to asvpx vitest). These are standard development operations required for the skill's primary function and do not involve suspicious network or system operations.- [INDIRECT_PROMPT_INJECTION]: The skill processes project source files to generate unit tests, which introduces a surface for indirect prompt injection. - Ingestion points: Project source files (utilities, services, stores, API clients) as specified in
SKILL.md. - Boundary markers: Absent.
- Capability inventory: Shell command execution (
pnpm,vpx vitest) and file modification (writing.test.tsfiles). - Sanitization: Absent. This risk surface is typical for development-focused agents and is considered safe within the intended context of unit testing.
Audit Metadata