testing-library
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard, well-known development dependencies from the NPM registry, including
@testing-library/react,@testing-library/jest-dom,@testing-library/user-event,vitest, andhappy-dom. - [INDIRECT_PROMPT_INJECTION]: The skill processes component source code and user requirements to generate test suites, representing a potential surface for indirect prompt injection if source files are malicious.
- Ingestion points: Ingests UI component code (e.g.,
LoginForm.tsx) and natural language test requirements (e.g., "Write tests for a multi-step registration form"). - Boundary markers: The skill does not explicitly define delimiters for untrusted component code in its instructional templates.
- Capability inventory: The skill facilitates code generation for testing frameworks and configuration files for build tools (Vitest).
- Sanitization: The skill relies on default agent processing and does not provide specific sanitization or validation logic for the code it analyzes.
Audit Metadata