スキル vitest-testing
📦

vitest-testing

コンテンツリビジョン r1 高リスク 🌐 ネットワークアクセス📁 ファイルシステムへのアクセス⚙️ 外部コマンド🔑 環境変数⚡ スクリプトを含む

信頼性の高い Vitest テストスイートを構築する

ユニット、統合、コンポーネント、E2E の各ワークフローに例が散らばっていると、有用なテストを書くのは困難です。このスキルは、Claude、Codex、Claude Code に、パターンの選択、テストの作成、テスト容易性の向上のための体系化された Vitest ガイダンスを提供します。

対応: Claude Codex Code(CC)
⚠️ 38 不十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト
Review the Skillstore skill "vitest-testing" from https://skillstore.io/skills/adammanuel-dev-vitest-testing.md and its manifest at https://skillstore.io/api/skills/adammanuel-dev-vitest-testing/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

テストする

「vitest-testing」を使用しています。 ユーザーを検証し、データベースに書き込むサービスのテストを手伝ってください。

期待される結果:

  • 検証はモックを使ってユニットテストし、リポジトリ境界は統合テストするという推奨。
  • 振る舞い、失敗パス、データベースのクリーンアップ要件ごとに整理された小さなテスト計画。
  • 本番データベースへのアクセスを避け、フィクスチャを分離しておくための注意点。

「vitest-testing」を使用しています。 React コンポーネントテストはローカルでは通りますが、CI で失敗します。

期待される結果:

  • 非同期レンダリング、ユーザーイベント、タイマー、クリーンアップ、環境差異に関するチェックリスト。
  • 安定したアサーションのための Vitest と Testing Library の推奨パターン。
  • sleep を避け、代わりに見える振る舞いをアサートするよう促す警告。

「vitest-testing」を使用しています。 これらの Jest モックを Vitest に変換してください。

期待される結果:

  • Jest のモック API から Vitest の同等機能への対応表。
  • 巻き上げ、インポートのタイミング、モジュールファクトリ、モックの復元に関するガイダンス。
  • 実際のテストランナーで検証すべき移行リスク。

セキュリティ監査

高リスク

Most static matches are false positives caused by testing documentation, Markdown links, JavaScript template literals, and normal Vitest examples. I confirmed a smaller set of risks around user-local hidden Claude skill paths, environment mutation or state capture, API-key configuration, shell guidance, and destructive database cleanup examples that should be clarified before publication. Static review was capped at 400/442 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

27
スキャンされたファイル
14,285
解析済み行数
38
レビュー項目
0
誤検知を無視

確認済みのセキュリティ上の懸念 (7)

高
Environment file access
const testApiKey = process.env.STRIPE_TEST_KEY
The example reads a payment provider test API key from the environment. It is legitimate for integration tests, but still handles secret-like configuration and should be kept for review.
高
Environment file access
process.env[envKey] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
高
Environment file access
manager.saveState('env.NODE_ENV', process.env.NODE_ENV)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
高
Environment file access
manager.saveState('env.API_URL', process.env.API_URL)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
高
Environment file access
process.env[key.substring(4)] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
SQLite database file
await this.db.raw('TRUNCATE TABLE users CASCADE')
The example contains destructive database cleanup commands. It is intended for tests, but is dangerous if copied against a non-test database.
中
SQLite database file
await this.db.raw('TRUNCATE TABLE orders CASCADE')
The example contains destructive database cleanup commands. It is intended for tests, but is dangerous if copied against a non-test database.
機能レビュー項目 (38)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && \
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-login.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-debug-selectors.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-registration.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
高
Hidden file in home directory
cd ~/.claude/skills/playwright-skill
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && \
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
const helpers = require('/Users/adammanuel/.claude/skills/playwright-skill/lib/helpers');
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-login.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-debug-selectors.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
const helpers = require('/Users/adammanuel/.claude/skills/playwright-skill/lib/helpers');
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-registration.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
open /Users/adammanuel/.claude/skills/vitest-testing/README.md
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
open /Users/adammanuel/.claude/skills/vitest-testing/quick-reference/cheatsheet.md
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
open /Users/adammanuel/.claude/skills/vitest-testing/index.md
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Hidden file access
cd ~/.claude/skills/playwright-skill
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-checkout.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-login.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-debug-selectors.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Temp directory access
cd ~/.claude/skills/playwright-skill && node run.js /tmp/playwright-test-registration.js
The example directs access to user-local hidden Claude skill paths, including command execution from ~/.claude or an absolute home directory. This is risky for marketplace distribution because it can train agents to touch private local skill directories.
中
Unix shell invocation
#!/bin/bash
The finding indicates a shell invocation in documentation. It may be legitimate migration guidance, but shell commands should remain explicit and reviewed before marketplace publication.
中
Environment variable access (bracket notation)
process.env[envKey] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable access (bracket notation)
process.env[key.substring(4)] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable access (dot notation)
const testApiKey = process.env.STRIPE_TEST_KEY
The example reads a payment provider test API key from the environment. It is legitimate for integration tests, but still handles secret-like configuration and should be kept for review.
中
Environment variable access (dot notation)
manager.saveState('env.NODE_ENV', process.env.NODE_ENV)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable access (dot notation)
manager.saveState('env.API_URL', process.env.API_URL)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable object
const testApiKey = process.env.STRIPE_TEST_KEY
The example reads a payment provider test API key from the environment. It is legitimate for integration tests, but still handles secret-like configuration and should be kept for review.
中
Environment variable object
process.env[envKey] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable object
manager.saveState('env.NODE_ENV', process.env.NODE_ENV)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable object
manager.saveState('env.API_URL', process.env.API_URL)
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.
中
Environment variable object
process.env[key.substring(4)] = value
The snippet mutates or stores environment-variable state in test examples. It appears test-scoped, but can leak or persist sensitive configuration if copied without isolation.

リスク要因

🌐 ネットワークアクセス (46)
patterns/async-testing.md:339 patterns/async-testing.md:340 patterns/async-testing.md:341 patterns/component-testing.md:443 patterns/e2e-testing.md:57 patterns/e2e-testing.md:87 patterns/e2e-testing.md:209 patterns/e2e-testing.md:231 patterns/e2e-testing.md:584 patterns/e2e-testing.md:653 patterns/e2e-testing.md:703 patterns/error-testing.md:128 patterns/integration-testing.md:156 patterns/integration-testing.md:180 patterns/integration-testing.md:200 patterns/integration-testing.md:203 patterns/integration-testing.md:263 patterns/integration-testing.md:281 patterns/test-data.md:725 patterns/test-data.md:735 principles/first-principles.md:392 principles/first-principles.md:392 principles/testing-pyramid.md:265 principles/testing-pyramid.md:154 quick-reference/jest-to-vitest.md:363 quick-reference/jest-to-vitest.md:364 quick-reference/jest-to-vitest.md:365 quick-reference/jest-to-vitest.md:371 quick-reference/jest-to-vitest.md:372 quick-reference/jest-to-vitest.md:373 refactoring/testability-patterns.md:438 refactoring/testability-patterns.md:394 refactoring/testability-patterns.md:398 refactoring/testability-patterns.md:399 refactoring/testability-patterns.md:404 refactoring/testability-patterns.md:409 refactoring/testability-patterns.md:421 refactoring/testability-patterns.md:424 refactoring/testability-patterns.md:429 SKILL.md:354 SKILL.md:355 SKILL.md:356 SKILL.md:357 strategies/black-box-testing.md:228 strategies/black-box-testing.md:252 strategies/black-box-testing.md:267
📁 ファイルシステムへのアクセス (50)
⚙️ 外部コマンド (50)
patterns/e2e-testing.md:95-127 patterns/e2e-testing.md:253-277 patterns/e2e-testing.md:349-391 patterns/e2e-testing.md:490-532 patterns/e2e-testing.md:586-592 patterns/e2e-testing.md:592-622 patterns/e2e-testing.md:661-669 patterns/e2e-testing.md:669-677 patterns/e2e-testing.md:677-690 patterns/e2e-testing.md:710-718 patterns/e2e-testing.md:718-745 patterns/error-testing.md:78-94 patterns/error-testing.md:94-102 patterns/error-testing.md:314-321 patterns/error-testing.md:321-353 patterns/performance-testing.md:76-77 patterns/performance-testing.md:77-78 patterns/performance-testing.md:78-93 patterns/performance-testing.md:104-111 patterns/performance-testing.md:111-119 patterns/performance-testing.md:119-123 patterns/performance-testing.md:159-161 patterns/performance-testing.md:161-184 patterns/performance-testing.md:218-235 patterns/performance-testing.md:383-409 patterns/performance-testing.md:571-616 patterns/performance-testing.md:666-671 patterns/performance-testing.md:671-684 patterns/test-data.md:56-60 patterns/test-data.md:60-90 patterns/test-data.md:90-127 patterns/test-data.md:358-396 patterns/test-data.md:396-402 patterns/test-data.md:402-407 patterns/test-data.md:466-491 patterns/test-data.md:491-537 patterns/test-data.md:537-593 patterns/test-doubles.md:395-405 patterns/test-doubles.md:405-430 principles/aaa-pattern.md:538-556 quick-reference/cheatsheet.md:299-304 quick-reference/cheatsheet.md:316-323 quick-reference/jest-to-vitest.md:272-274 quick-reference/jest-to-vitest.md:284-286 quick-reference/jest-to-vitest.md:448 refactoring/testability-patterns.md:159-167 refactoring/testability-patterns.md:200-208 refactoring/testability-patterns.md:399-410 refactoring/testability-patterns.md:438-445 SKILL.md:32
🔑 環境変数 (24)
⚡ スクリプトを含む (3)
監査者: claude 監査履歴を表示 →
このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く
セキュリティ評価

レポートリンクをコピー

https://skillstore.io/skills/adammanuel-dev-vitest-testing/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/adammanuel-dev-vitest-testing/security.svg)](https://skillstore.io/skills/adammanuel-dev-vitest-testing?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/adammanuel-dev-vitest-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/adammanuel-dev-vitest-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/adammanuel-dev-vitest-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学術引用 (APA · BibTeX · CFF)

APA形式の引用

AdamManuel-dev. (2026). vitest-testing security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/adammanuel-dev-vitest-testing/audits/10

BibTeX形式の引用

@techreport{adammanuel-dev-adammanuel-dev-vitest-testing-2026, author = {AdamManuel-dev}, title = {vitest-testing security audit report (audit version 10)}, institution = {Skillstore}, year = {2026}, number = {10}, url = {https://skillstore.io/skills/adammanuel-dev-vitest-testing/audits/10}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "vitest-testing security audit report (audit version 10)" version: "unspecified" type: report authors: - name: "AdamManuel-dev" date-released: "2026-07-09" url: "https://skillstore.io/skills/adammanuel-dev-vitest-testing/audits/10" identifiers: - type: other value: "skillstore:adammanuel-dev-vitest-testing:audit:10" description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由 証拠の信頼度: 中
55
アーキテクチャ
85
保守性
87
コンテンツ
70
コミュニティ
83
仕様準拠

作成できるもの

新しいテストスイートを計画する

実装を開始する前に、ユニット、統合、コンポーネント、E2E テストの適切な組み合わせを選択します。

壊れやすい既存テストを改善する

安定した振る舞い、より良いフィクスチャ、焦点を絞ったアサーションを中心にテストをリファクタリングします。

Jest パターンを Vitest に移行する

一般的な Jest API とモック手法を、実践的な注意点とともに Vitest の同等機能へ対応付けます。

これらのプロンプトを試す

テスト種別を選ぶ
vitest-testing スキルを使用して、この機能にどの種類のテストを書くべきか判断するのを手伝ってください。ユニット、統合、コンポーネント、E2E のどのテストが最適か説明してください。
焦点を絞った Vitest テストを書く
vitest-testing スキルを使用して、このモジュールの Vitest テストを作成してください。AAA 構造に従い、振る舞いをテストし、必要なモックのみを含めてください。
壊れやすいテストを修正する
vitest-testing スキルを使用して、これらのテストが壊れやすくないかレビューしてください。振る舞いに焦点を当てたアサーション、より良いフィクスチャ、より安全な非同期処理を提案してください。
テスト戦略を設計する
vitest-testing スキルを使用して、このプロジェクト向けの Vitest 戦略を設計してください。テストピラミッドのバランス、テストデータ管理、モック、統合境界、CI の考慮事項、移行リスクを網羅してください。

ベストプラクティス

  • モックや実装レベルのアサーションを選ぶ前に、観察可能な振る舞いから始めます。
  • テストデータは明示的かつ分離された状態に保ち、テスト間でリセットします。
  • レビュー対象の振る舞いに対して信頼を得られる最小のテスト種別を使用します。

回避

  • テスト専用の保護策なしに、実データベース、認証情報、サービスに触れる例をコピーしないでください。
  • ユニットテストや統合テストでより速くカバーできるロジックに対して、E2E テストを過度に使用しないでください。
  • 公開された振る舞いが利用できる場合は、非公開の実装詳細をアサートしないでください。

よくある質問

このスキルは私のプロジェクト向けに完全なテストを書いてくれますか?
AI エージェントを導くパターンとプロンプトを提供します。エージェントには引き続き、コードとテストランナーへのアクセスが必要です。
React Testing Library に役立ちますか?
はい。ユーザーイベント、アクセシビリティクエリ、非同期レンダリング、クリーンアップに関するコンポーネントテストのガイダンスが含まれています。
API テストや統合テストをサポートしていますか?
はい。API クライアントテスト、HTTP モック、データベース境界、統合テストのセットアップパターンを扱います。
すべての例を直接コピーしても安全ですか?
いいえ。例は自分のテスト環境に合わせて調整し、実際の認証情報、本番データベース、制御されていない外部サービスは避けてください。
Jest テストを Vitest に移行できますか?
一般的な API、モック、インポート、ランナーの違いについて、Jest から Vitest へのガイダンスが含まれています。
手動のテストレビューの代替になりますか?
いいえ。生成されたテストは、正確性、振る舞いのカバレッジ、セキュリティ境界、プロジェクト固有の規約についてレビューしてください。

開発者情報

作成者

AdamManuel-dev

ライセンス

MIT

Skillstore リビジョン

r1

バージョンに関する注意

作者はバージョンを宣言していません。

参照

7db9b9f06e0ab79c575b58bc48c4d8dc9849f424

メンテナンスの新しさ

2026/7/23

利用状況

6 ダウンロード · 209 閲覧

AdamManuel-dev のその他のスキル

すべて表示
すべて表示