vite
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill serves as a documentation repository for the Vite build tool. It follows security best practices by providing explicit warnings about environment variable exposure and instructions for implementing Content Security Policy (CSP) nonces.
- [EXTERNAL_DOWNLOADS]: The skill references official Vite plugins and tools (e.g.,
@vitejs/plugin-react,npm create vite@latest) from well-known and trusted sources. These are standard dependencies for frontend development. - [COMMAND_EXECUTION]: Documents legitimate CLI commands for development (server start), building (production assets), and previewing, which is the intended functionality of a build tool skill.
- [DATA_EXFILTRATION]: No exfiltration patterns found. The documentation includes security notes advising developers to add
.env.localto.gitignoreand explaining how to prevent secret leakage using theVITE_prefix.
Audit Metadata