mutation-testing

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill is designed for software quality assurance and follows established testing methodologies.
  • [EXTERNAL_DOWNLOADS]: The skill refers to official and well-known packages from the NPM registry, specifically @stryker-mutator/core and @stryker-mutator/jest-runner. These are standard tools for mutation testing in Node.js environments.
  • [COMMAND_EXECUTION]: Includes a localized Node.js script used to manage the run-history.json file. This script performs basic file reading and writing within the skill's directory to track mutation score trends, which is a benign and intended functionality.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests source code files (e.g., src/payment.ts) and external mutation/coverage reports for analysis.
  • Boundary markers: None explicitly defined in instructions, though tasks are scoped to specific files.
  • Capability inventory: The skill uses subprocess calls to run Stryker (npx stryker run) and file writing for history tracking.
  • Sanitization: Standard LLM guardrails are expected to handle external code content during analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:26 PM
Security Audit — agent-trust-hub — mutation-testing