vitest
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): No security issues detected. The skill contains only Markdown documentation and reference materials. There is no executable logic, script, or configuration file that performs network operations, file modifications, or credential handling beyond instructional examples.
- Indirect Prompt Injection (LOW): This skill defines how an agent should interact with test code. By design, the agent will ingest untrusted code from a user's repository to run tests.
- Ingestion points: Local test files (.test.ts, .spec.ts) and project configuration files (vitest.config.ts) as described in
references/core-config.md. - Boundary markers: Absent. The documentation does not provide specific delimiters for separating test code from agent instructions.
- Capability inventory: The skill documents the use of the
vitestCLI, which allows arbitrary code execution within the test environment (e.g.,references/core-cli.md). - Sanitization: Not applicable to documentation files.
Audit Metadata