mutation-testing
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executemewtandmutonCLI commands as well as project-specific test commands (e.g.,cargo test,npm test,go test). This is the primary and intended function of the skill for running mutation tests. - [DATA_INGESTION_SURFACE]: The skill interprets project configuration and source code to define the scope of testing, which constitutes a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read
mewt.toml,package.json,Makefile, and project source files inworkflows/configuration.mdandreferences/optimization-strategies.md. - Boundary markers: Absent. No specific delimiters are recommended for wrapping untrusted project data.
- Capability inventory: Includes
Bash(command execution),Write(configuration modification), andRead(file inspection). - Sanitization: Absent. The skill directs the agent to execute commands discovered within project files (like
testcommands inmewt.toml) without explicit sanitization or validation logic.
Audit Metadata