react-vite

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands within a pnpm monorepo environment, such as running codegen (pnpm run --filter @workspace/api-spec codegen) and database migrations (pnpm --filter @workspace/db run push). It also uses grep to discover generated exports for context passing.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface as it ingests user-provided application requirements and attached assets to generate OpenAPI specifications, database schemas, and application code. This is the primary intended purpose of the skill and is managed through structured development phases and integration with a design subagent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:03 PM