mutation-testing
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is designed for software quality assurance and follows established testing methodologies.
- [EXTERNAL_DOWNLOADS]: The skill refers to official and well-known packages from the NPM registry, specifically
@stryker-mutator/coreand@stryker-mutator/jest-runner. These are standard tools for mutation testing in Node.js environments. - [COMMAND_EXECUTION]: Includes a localized Node.js script used to manage the
run-history.jsonfile. This script performs basic file reading and writing within the skill's directory to track mutation score trends, which is a benign and intended functionality. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests source code files (e.g.,
src/payment.ts) and external mutation/coverage reports for analysis. - Boundary markers: None explicitly defined in instructions, though tasks are scoped to specific files.
- Capability inventory: The skill uses subprocess calls to run Stryker (
npx stryker run) and file writing for history tracking. - Sanitization: Standard LLM guardrails are expected to handle external code content during analysis.
Audit Metadata