vitest
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and executes code from test and source files, which creates an inherent attack surface for indirect prompt injection where malicious instructions could be embedded in the data being tested.
- Ingestion points: The skill ingests JavaScript/TypeScript test files, source code, and snapshot files (
.snap) based on project configurations, as described inreferences/core-config.mdandreferences/features-snapshots.md. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings to help the agent distinguish between its core logic and the code content it processes.
- Capability inventory: As a testing framework, Vitest executes code within a Node.js runtime environment, granting it access to system capabilities including file system operations, network requests, and subprocess execution, as detailed in
references/features-concurrency.mdandreferences/advanced-vi.md. - Sanitization: No sanitization or filtering of content from ingested files is described before the code is executed or reported back to the user.
Audit Metadata