stryker-mutation
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and analysis of untrusted data from the user's project environment, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads project configuration files (
stryker.conf.json,package.json), mutation reports, and application source code/test files (e.g.,src/**/*.js,test/**/*.js). - Boundary markers: There are no explicit delimiters or warnings to the agent to ignore instructions that might be embedded in the code or comments of the files being analyzed.
- Capability inventory: The skill involves reading local files and writing modifications to configuration files and CI/CD workflow files (
.github/workflows/*.yml). - Sanitization: The instructions do not prescribe any sanitization or validation steps for the content of the files before they are processed by the agent's logic.
Audit Metadata