NYC

vitest-testing-patterns

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill utilizes standard npm and npx commands for running tests and coverage reports (npm test, npm run test:run). These are routine development operations within the specified tool permissions.
  • [CREDENTIALS_UNSAFE] (SAFE): No hardcoded secrets or real API keys were found. Mocking examples use generic placeholders like user-123 and Mock response.
  • [EXTERNAL_DOWNLOADS] (SAFE): No unauthorized or suspicious external downloads or remote script executions are present. References are limited to standard, well-known npm packages.
  • [DATA_EXFILTRATION] (SAFE): There are no patterns suggesting data collection or exfiltration. Mocked network calls (fetch) are used solely for local testing simulation.
  • [PROMPT_INJECTION] (SAFE): No instructions designed to override agent behavior or bypass safety filters were detected.
  • [COMMAND_EXECUTION] (SAFE): Use of vi.mock and dependency injection are standard unit testing techniques and do not constitute unsafe dynamic execution in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:07 PM