mutmut-mutation
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the 'mutmut' mutation testing package from the Python Package Index (PyPI) and references documentation on ReadTheDocs.\n- [COMMAND_EXECUTION]: Instructs the agent to execute shell commands for package installation, test execution, and result management using tools like pip, mutmut, and pytest.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes local Python source code and test files, creating an attack surface where maliciously crafted code could attempt to influence the agent during result browsing or diff analysis.\n
- Ingestion points: Local Python files defined in source_paths and test folders (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided.\n
- Capability inventory: Includes software installation (pip), file system writes (mutmut apply), and arbitrary test execution (pytest) as specified in SKILL.md.\n
- Sanitization: No sanitization or validation of the ingested code content is performed before it is presented to the agent.
Audit Metadata