vitest

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is composed exclusively of static documentation, code examples, and reference guides for software testing. A thorough analysis of the 47 files confirms that the content is legitimate and contains no malicious code or instructions.
  • [PROMPT_INJECTION]: The instructions do not contain attempts to override agent behavior, bypass safety guardrails, or reveal system prompts. The provided guidelines are focused on testing best practices.
  • [DATA_EXFILTRATION]: No patterns for accessing sensitive files (such as credentials, environment variables, or SSH keys) were found. The code examples for network mocking (MSW) and API interactions use standard placeholders and local development paths.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform remote script downloads or execute untrusted code. Command patterns mentioned, such as npx vitest and GitHub Actions workflows, are standard developer tools used for testing purposes.
  • [OBFUSCATION]: The content is presented in plain text markdown. There is no evidence of Base64 encoding, zero-width characters, or homoglyph attacks used to hide malicious intent.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of the dynamic context injection syntax (!command) was found in the skill entry point or referenced files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:49 PM