The Agent Skills Directory

[SAFE]: The skill provides documentation and configuration snippets for Vite and TYPO3 integration without executing malicious code or exfiltrating data.
[COMMAND_EXECUTION]: Provides configuration templates for the Vite dev server, specifically mentioning allowedHosts: true and cors: true. The skill correctly identifies these as requirements for development environments behind reverse proxies (like Traefik or Nginx) due to Vite's default security posture (GHSA-vg6x-rcgg-rjx6). While this disables Host header checks for the dev server, it is presented as a documented configuration choice for local development workflows.
[SAFE]: Instructions for font loading prioritize local hosting (@font-face) over external CDNs, which is a privacy and security best practice.
[SAFE]: The skill includes guidance on implementing Content Security Policy (CSP) using nonces for assets, which enhances the security of the resulting TYPO3 frontend.
[SAFE]: All referenced external tools and libraries (e.g., praetorius/vite-asset-collector, autoprefixer, cssnano) are standard, well-known components within the PHP and JavaScript development ecosystems.

typo3-vite