vite
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and workflow instructions for Vite tooling without any detected malicious patterns or security vulnerabilities.
- [DATA_EXFILTRATION]: The skill includes explicit security guidance to prevent data exposure, specifically advising that secrets should never be placed in environment variables using the
VITE_prefix, as these are exposed to the client. - [EXTERNAL_DOWNLOADS]: All external URLs and resources point to official Vite project documentation (vite.dev), official GitHub repositories (github.com/vitejs/vite), or well-known development services (e.g., rolldown.rs). These are documented as safe, official sources.
- [COMMAND_EXECUTION]: The skill suggests standard development commands such as
bunx vite buildandtsc --noEmit, which are expected within the context of a frontend build tool skill and pose no inherent security risk when used as documented.
Audit Metadata