The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides standard documentation for installing and running the Stryker mutation testing tool using npm install and npx stryker run. It also includes a node-based helper command in SKILL.md to update a local run-history.json file for tracking performance metrics.
[EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages (@stryker-mutator/core, @stryker-mutator/jest-runner) from the official npm registry. These are well-known developer tools and do not represent a security risk.
[INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface in SKILL.md where agents are instructed to ingest external coverage and mutation reports (coverageReport, mutationReport). While this creates a path for potentially malicious data to enter the agent's context, the skill is focused on specialized code analysis, and the risk is considered low given the intended technical use case.
[SAFE]: All identified command executions and package references are standard practices for software development and testing workflows. No obfuscation, persistence, or credential exfiltration attempts were found.

mutation-testing