Skills tdd-vitest-typescript

📦

tdd-vitest-typescript

Name: tdd-vitest-typescript
Author: Emz1998

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

使用 Vitest 建置 TypeScript 測試

團隊常常很晚才加入測試，這會讓 TypeScript 回歸問題更難被捕捉。此技能會引導 Claude、Codex 和 Claude Code 進行測試優先的 Vitest 工作流程。

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Maintain this Skill? Claim it ⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "tdd-vitest-typescript" from https://skillstore.io/skills/emz1998-tdd-vitest-typescript.md and its manifest at https://skillstore.io/api/skills/emz1998-tdd-vitest-typescript/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/emz1998-tdd-vitest-typescript.md Signed manifest GET /api/skills/emz1998-tdd-vitest-typescript/manifest Signed lockfile GET /api/skills/emz1998-tdd-vitest-typescript/lockfile

Test it

Using "tdd-vitest-typescript". 我需要針對計算機除法行為的測試。

Expected outcome:

此技能會識別成功案例和除以零案例，先撰寫失敗測試，然後引導最小實作。

Using "tdd-vitest-typescript". 我們的非同步使用者查詢測試不穩定。

Expected outcome:

此技能會用支援 promise 的斷言取代時間延遲，在測試之間重設 mock，並分離成功與失敗情境。

Using "tdd-vitest-typescript". 在重構前審查這些 Vitest 測試。

Expected outcome:

此技能會標示與實作耦合的斷言、建議以行為為核心的覆蓋範圍，並透過有意義的測試保護重構。

Security Audit

High Risk

v4 • 7/5/2026 Open versioned report

Most static findings are false positives from Markdown code fences, JavaScript template literals, and sample Vitest assertions. The setup script does have real external command and filesystem side effects, and it accepts an unvalidated target directory before writing generated files.

Files scanned

1,930

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

scripts/setup-vitest.js:12 scripts/setup-vitest.js:27-33 scripts/setup-vitest.js:48-177

Unvalidated Project Path Can Redirect File Writes

The setup script accepts the target directory from process.argv[2], creates it recursively, changes into it, and writes project files. Absolute paths or parent-directory segments could place generated files outside the intended workspace.

The path comes directly from argv and is passed into existsSync, mkdirSync, and process.chdir before many writes. I found no normalization or rejection of absolute paths or parent traversal.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/setup-vitest.js:8

Node.js child_process module

import { execSync } from 'child_process';

The setup script imports child_process so it can run external commands. The observed commands are setup-related and hardcoded, but this still gives the script package-manager execution capability.

High

scripts/setup-vitest.js:17

Synchronous process execution

execSync(command, { stdio: 'inherit', ...options });

execSync runs npm init and npm install from the script, which can modify the workspace and trigger package-manager side effects. The command values are hardcoded, so the concern is execution capability rather than direct injection.

Medium

scripts/setup-vitest.js:22

Synchronous file operations

writeFileSync(path, content.trim() + '\n');

writeFileSync is used by the project generator to create files such as configs, source files, tests, and README content. This is intended setup behavior, but it can overwrite files without prompting.

Medium

scripts/setup-vitest.js:177

Synchronous file operations

writeFileSync('package.json', JSON.stringify(packageJson, null, 2) + '\n');

The script writes package.json after modifying scripts and module type. This is legitimate setup behavior, but it directly changes project metadata and can overwrite user configuration.

Risk Factors

⚙️ External commands (83)

📁 Filesystem access (7)

references/anti-patterns.md:12 scripts/setup-vitest.js:9 scripts/setup-vitest.js:22 scripts/setup-vitest.js:167 scripts/setup-vitest.js:177 scripts/setup-vitest.js:36 scripts/setup-vitest.js:126

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/emz1998-tdd-vitest-typescript/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/emz1998-tdd-vitest-typescript/security.svg)](https://skillstore.io/skills/emz1998-tdd-vitest-typescript?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/emz1998-tdd-vitest-typescript?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/emz1998-tdd-vitest-typescript/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/emz1998-tdd-vitest-typescript.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Emz1998. (2026). tdd-vitest-typescript security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/emz1998-tdd-vitest-typescript/audits/4

BibTeX citation

@techreport{emz1998-emz1998-tdd-vitest-typescript-2026,
  author = {Emz1998},
  title = {tdd-vitest-typescript security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/emz1998-tdd-vitest-typescript/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tdd-vitest-typescript security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "Emz1998"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/emz1998-tdd-vitest-typescript/audits/4"
identifiers:
  - type: other
    value: "skillstore:emz1998-tdd-vitest-typescript:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

開始一個經測試的 TypeScript 功能

建立第一個失敗的 Vitest 測試，實作最小可通過的程式碼，並有信心地進行重構。

在程式碼審查中改善測試品質

在合併前識別過於寬泛的斷言、過多 mock、共享狀態和缺少的邊界案例。

學習實用的 TDD 模式

使用 TypeScript 範例練習聚焦測試、非同步斷言、fixture 和覆蓋率習慣。

Try These Prompts

建立第一個失敗測試

使用此技能為這個 TypeScript 行為撰寫第一個失敗的 Vitest 測試。接著說明最小的實作步驟。

覆蓋現有函式

審查這個 TypeScript 函式，並針對正常案例、邊界案例和錯誤提出 Vitest 測試。遵循 Red-Green-Refactor。

以測試安全性進行重構

為這次重構設計 Vitest 安全網。優先採用以行為為核心的測試，並避免與實作細節綁定的斷言。

規劃整合覆蓋範圍

使用 Vitest 為這個 TypeScript 工作流程建立整合測試計畫。區分單元測試、整合測試、mock 和設定需求。

Best Practices

先撰寫失敗測試再實作，並保持每個步驟都小而明確。
測試公開行為、邊界案例和錯誤路徑，而不是私有實作細節。
透過重設 mock 並在每個測試中重新建立可變狀態，讓測試彼此隔離。

Avoid

不要使用一次驗證多個不相關行為的寬泛測試。
不要用 skip 或靜默錯誤處理來隱藏不穩定測試。
不要過度 mock 內部邏輯，導致測試不再證明真實行為。

Frequently Asked Questions

此技能會自動安裝 Vitest 嗎？

它包含設定指引和設定腳本，但使用者應在執行前審查腳本。

它能協助處理現有程式碼嗎？

可以。它能為現有 TypeScript 程式碼加入特徵化測試、邊界案例測試和重構安全測試。

它支援非同步測試嗎？

可以。參考資料包含 promise 斷言、rejected promise、重試和非同步整合範例。

它可以測試 UI 元件嗎？

它提供可支援 UI 測試的 Vitest 模式，但可能仍需要專案專屬的渲染工具。

它只適用於單元測試嗎？

不是。它涵蓋單元測試、整合模式、mock、fixture、snapshot 和覆蓋率習慣。

它會保證完整覆蓋率嗎？

不會。它協助設計有意義的測試，但團隊必須根據產品風險選擇覆蓋目標。

Developer Details

Author

Emz1998

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Emz1998/nexly-notes/tree/main/archive/tdd

Ref

30c73eac2afe762f6aa9c4553158769369d47351

Maintenance freshness

7/21/2026

Usage

7 downloads · 165 views

File structure

📁 references/

📄 advanced-patterns.md

📄 anti-patterns.md

📁 scripts/

📄 setup-vitest.js

📄 SKILL.md

tdd-vitest-typescript

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (1)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

開始一個經測試的 TypeScript 功能

在程式碼審查中改善測試品質

學習實用的 TDD 模式

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from Emz1998

code-instructor

brainstorming-features

writing-page-layout

tasks-generator

writing-types

implementation-review

playwright-testing

testing

testing-strategy

jest-testing

nestjs-code-audit

starknet-js

tdd-vitest-typescript

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (1)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

開始一個經測試的 TypeScript 功能

在程式碼審查中改善測試品質

學習實用的 TDD 模式

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from Emz1998

code-instructor

brainstorming-features

writing-page-layout

tasks-generator

writing-types

implementation-review

Related Skills

playwright-testing

testing

testing-strategy

jest-testing

nestjs-code-audit

starknet-js