unit-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing established testing and mutation analysis tools, specifically '@stryker-mutator/core' and '@stryker-mutator/jest-runner' via npm, and 'mutmut' via pip, all of which are recognized tools in the software testing ecosystem.
- [COMMAND_EXECUTION]: Instructs the agent to execute standard testing CLI tools including 'jest', 'vitest', 'pytest', and mutation testing runners to verify codebase integrity and coverage thresholds.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project configuration files to determine its operational logic, representing a potential injection surface.
- Ingestion points: Processes 'package.json', 'pyproject.toml', 'jest.config.', 'vitest.config.', and '.nycrc' files from the repository.
- Boundary markers: No specific delimiters or security instructions are provided to the agent to disregard potential prompt injection attempts embedded within these configuration files.
- Capability inventory: The skill allows for shell command execution for testing and mutation tasks.
- Sanitization: The instructions do not define validation or sanitization procedures for data extracted from the ingested project files.
Audit Metadata