skills/onmax/nuxt-skills/vitest/Gen Agent Trust Hub

vitest

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard technical reference for the Vitest testing framework. It provides code templates and CLI command examples (e.g., npm i -D vitest, vitest run) that are consistent with official documentation and best practices.
  • [INDIRECT_PROMPT_INJECTION]: While the skill manages an environment that executes code (test suites), this is its primary intended purpose. The instructions do not involve ingesting untrusted external data without standard development process boundaries.
  • Ingestion points: Test files (*.test.ts) and configuration files (vitest.config.ts) created or edited by the agent.
  • Boundary markers: Standard markdown code blocks are used for templates.
  • Capability inventory: Use of the vitest CLI for running tests and generating coverage reports.
  • Sanitization: N/A
  • the skill provides static templates for developer use.
  • [DYNAMIC_EXECUTION]: The skill documentation facilitates the use of Vitest, which by design executes code at runtime. This behavior is expected for a testing tool and no unsafe execution patterns (like eval on untrusted strings or remote code fetching) are present.
  • [EXTERNAL_DOWNLOADS]: Mentions of package installations (jsdom, happy-dom, vitest) target well-known, standard packages from the official NPM registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:36 PM
Security Audit — agent-trust-hub — vitest