vite-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data to make decisions about build optimizations and troubleshooting. * Ingestion points: Reads
package.json,vite.config.*, and source files usingRead,Grep, andGlobtools. * Boundary markers: The instructions lack explicit delimiters or warnings to ignore potentially malicious instructions embedded in the analyzed project files. * Capability inventory: The skill has access toBashfor command execution andEdit/MultiEditfor file modification. * Sanitization: No evidence of sanitization or validation of the content read from the project files before it influences agent behavior. - [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands for diagnosis and validation. Evidence: Use of
vite --version,find,grep,lsof, andvite buildto inspect the environment and validate configurations. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto run external utilities, which involves downloading packages from the npm registry. Evidence:npx vite-bundle-analyzer dist --no-openis used for bundle analysis.
Audit Metadata