vitest
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard technical reference for the Vitest testing framework. It provides code templates and CLI command examples (e.g.,
npm i -D vitest,vitest run) that are consistent with official documentation and best practices. - [INDIRECT_PROMPT_INJECTION]: While the skill manages an environment that executes code (test suites), this is its primary intended purpose. The instructions do not involve ingesting untrusted external data without standard development process boundaries.
- Ingestion points: Test files (
*.test.ts) and configuration files (vitest.config.ts) created or edited by the agent. - Boundary markers: Standard markdown code blocks are used for templates.
- Capability inventory: Use of the
vitestCLI for running tests and generating coverage reports. - Sanitization: N/A
- the skill provides static templates for developer use.
- [DYNAMIC_EXECUTION]: The skill documentation facilitates the use of Vitest, which by design executes code at runtime. This behavior is expected for a testing tool and no unsafe execution patterns (like
evalon untrusted strings or remote code fetching) are present. - [EXTERNAL_DOWNLOADS]: Mentions of package installations (
jsdom,happy-dom,vitest) target well-known, standard packages from the official NPM registry.
Audit Metadata