vite-plus
Fail
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains a command to install the
vptoolchain usingcurl -fsSL https://vite.plus | bash. This pattern executes arbitrary code from a remote server without verification. - [EXTERNAL_DOWNLOADS]: The skill relies on external resources from
https://vite.plus, a domain that is not recognized as a trusted organization or well-known service in the security context. - [COMMAND_EXECUTION]: The skill provides instructions for running a variety of CLI commands through the
vptool, including package management (vp install,vp add) and build scripts (vp run), which can lead to the execution of untrusted third-party code.
Recommendations
- HIGH: Downloads and executes remote code from: https://vite.plus - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata