vitest-skill
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard configuration and usage patterns for the Vitest framework, following established best practices for software testing.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interpret user-provided source code to generate corresponding tests, which is an inherent injection surface.
- Ingestion points: JavaScript, TypeScript, and React source files processed by the agent.
- Boundary markers: None identified in the skill instructions.
- Capability inventory: Shell command execution via npx vitest and file system access for test generation.
- Sanitization: No explicit sanitization of user-provided code blocks is performed before processing.
Audit Metadata