skills/hairyf/skills/vitest/Gen Agent Trust Hub

vitest

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a technical reference for the Vitest testing framework, offering guidance on configuration, CLI usage, and various testing APIs. All content appears legitimate and is based on official project documentation.
  • [SAFE]: The skill references standard and well-known NPM packages for test environments and coverage, including jsdom, happy-dom, and official @vitest coverage providers.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a testing tool that processes external source code and test inputs, which inherently creates an indirect prompt injection surface. This is a characteristic of testing frameworks and not a flaw in the skill itself.
  • Ingestion points: Test files and source code referenced in core-config.md and features-filtering.md.
  • Boundary markers: The documentation describes the use of isolated test environments such as jsdom and node:vm in advanced-environments.md.
  • Capability inventory: The skill documents command execution (vitest CLI), file writing (snapshots), and network mocking utilities (vi.stubGlobal('fetch', ...)).
  • Sanitization: Standard environment and global mocking are documented as best practices for test isolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:05 PM
Security Audit — agent-trust-hub — vitest