skills/aloish/bistro/vite/Gen Agent Trust Hub

vite

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill serves as a documentation repository for the Vite build tool. It follows security best practices by providing explicit warnings about environment variable exposure and instructions for implementing Content Security Policy (CSP) nonces.
  • [EXTERNAL_DOWNLOADS]: The skill references official Vite plugins and tools (e.g., @vitejs/plugin-react, npm create vite@latest) from well-known and trusted sources. These are standard dependencies for frontend development.
  • [COMMAND_EXECUTION]: Documents legitimate CLI commands for development (server start), building (production assets), and previewing, which is the intended functionality of a build tool skill.
  • [DATA_EXFILTRATION]: No exfiltration patterns found. The documentation includes security notes advising developers to add .env.local to .gitignore and explaining how to prevent secret leakage using the VITE_ prefix.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 02:14 PM
Security Audit — agent-trust-hub — vite