qe-mutation-testing
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes commands to install
@stryker-mutator/coreand@stryker-mutator/jest-runnerfrom npm. These are legitimate packages from a well-known service for the purpose of mutation testing. - [COMMAND_EXECUTION]: The skill uses
npx stryker initandnpx stryker runto perform code mutation and test execution. These commands are standard for the described functionality. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and analyze untrusted local source code.
- Ingestion points: Reads all files matching the
src/**/*.tspattern defined in the configuration. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are present in the provided coordination pseudo-code.
- Capability inventory: The skill executes shell commands (
npx stryker) and coordinates with other agents to generate new test files. - Sanitization: No sanitization or filtering of the source code content is described before it is processed by the agent-driven tasks.
Audit Metadata