lipton-mutation-testing
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe skill is largely coherent with mutation-testing methodology and Lipton-inspired principles. The core capabilities (mutant generation, test execution against mutants, survivor analysis, mutation-score tracking) align with the stated purpose. However, the dynamic execution of mutated code via exec introduces a notable security risk (command execution) that should be mitigated with proper sandboxing or isolated execution. No unverifiable binaries or credential exposures are present, and there is no evidence of external data flows beyond internal mutation testing outputs. Overall, the footprint is consistent with the stated purpose but carries a non-trivial security concern around in-process code execution that should be addressed for safe usage.