vite-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation on Vite configuration, plugin usage, and build optimization. The instructions are purely informative and do not contain executable malicious code.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes defensive security guidance, warning that environment variables with the
VITE_prefix are inlined into the client bundle and should not be used for secrets. It also identifies a potential security trap in theloadEnvfunction where an empty prefix could expose server-side secrets. - [EXTERNAL_DOWNLOADS]: The skill references official and widely-used community plugins such as
@vitejs/plugin-reactandvite-plugin-checker. These are trusted resources within the web development ecosystem.
Audit Metadata