vite-plus-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly allows fetching arbitrary remote templates and packages (e.g., "vp create" accepting github:user/repo or remote URLs in scaffolding.md, and "vpx"/"vp dlx" downloads in binaries.md, plus the curl install in getting-started.md), so an agent using these flows would ingest untrusted third-party content (GitHub repos, npm packages, templates) that could include instructions able to influence subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs explicitly instruct running remote installers that fetch-and-execute code at runtime (e.g., "curl -fsSL https://vite.plus | bash" and "irm https://vite.plus/ps1 | iex"), so https://vite.plus is a high-confidence runtime external dependency that executes remote code.