qe-mutation-testing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
@stryker-mutator/coreand@stryker-mutator/jest-runnervia npm. These are standard, well-known development tools for mutation testing. - [INDIRECT_PROMPT_INJECTION]: The skill involves ingesting codebase content and mutation reports to generate new test cases. This establishes a data ingestion surface where the agent processes external, potentially untrusted code.
- Ingestion points: Code files (e.g.,
src/payment.ts), mutation reports, and coverage data. - Boundary markers: No explicit delimiters are specified in the templates for separating code from instructions.
- Capability inventory: The skill uses
npxto run the Stryker CLI and interacts with other agents (qe-test-generator,qe-coverage-analyzer) to modify the codebase. - Sanitization: None specified; the agent is expected to interpret the code logic to identify missing test boundaries.
Audit Metadata