vite

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and workflow instructions for Vite tooling without any detected malicious patterns or security vulnerabilities.
  • [DATA_EXFILTRATION]: The skill includes explicit security guidance to prevent data exposure, specifically advising that secrets should never be placed in environment variables using the VITE_ prefix, as these are exposed to the client.
  • [EXTERNAL_DOWNLOADS]: All external URLs and resources point to official Vite project documentation (vite.dev), official GitHub repositories (github.com/vitejs/vite), or well-known development services (e.g., rolldown.rs). These are documented as safe, official sources.
  • [COMMAND_EXECUTION]: The skill suggests standard development commands such as bunx vite build and tsc --noEmit, which are expected within the context of a frontend build tool skill and pose no inherent security risk when used as documented.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:17 PM
Security Audit — agent-trust-hub — vite