Results for "Vitest"

RCE in Your Test Suite: AI Agent Skills and the Attack Vector Skill Scanners Miss

When a developer runs npx skills add, the installer copies the entire skill directory into the repo. If a malicious skill includes a *.test.ts file, it runs dur…