vitest
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a technical reference for the Vitest testing framework, offering guidance on configuration, CLI usage, and various testing APIs. All content appears legitimate and is based on official project documentation.
- [SAFE]: The skill references standard and well-known NPM packages for test environments and coverage, including
jsdom,happy-dom, and official@vitestcoverage providers. - [INDIRECT_PROMPT_INJECTION]: The skill describes a testing tool that processes external source code and test inputs, which inherently creates an indirect prompt injection surface. This is a characteristic of testing frameworks and not a flaw in the skill itself.
- Ingestion points: Test files and source code referenced in
core-config.mdandfeatures-filtering.md. - Boundary markers: The documentation describes the use of isolated test environments such as
jsdomandnode:vminadvanced-environments.md. - Capability inventory: The skill documents command execution (
vitestCLI), file writing (snapshots), and network mocking utilities (vi.stubGlobal('fetch', ...)). - Sanitization: Standard environment and global mocking are documented as best practices for test isolation.
Audit Metadata