typo3-vite
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate architectural guidance for TYPO3 frontend development. All tools and packages mentioned (such as
praetorius/vite-asset-collectorand standard Vite plugins) are well-known within the TYPO3 and web development communities. No malicious commands, obfuscation, or data exfiltration patterns were detected. - [INDIRECT_PROMPT_INJECTION]: The skill defines a build pipeline that processes external SVG assets, which represents a standard but identifiable attack surface for indirect instructions if asset sources are untrusted.
- Ingestion points: The
SvgCopyOptimizePlugin(defined inreferences/vite-configuration.md) reads SVG files fromResources/Private/Svg/. - Boundary markers: None explicitly defined for the file content processing, as is typical for build tools.
- Capability inventory: The configuration enables file system reads and writes to
Resources/Public/Svg/and executes the SVGO optimizer. - Sanitization: The assets are sanitized via SVGO optimization during the build process to remove potentially malicious metadata or scripts before being served.
Audit Metadata