react-vite-feature-based
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Node.js scripts to automate project configuration, including modifying package.json, tsconfig.json, and pnpm-workspace.yaml. These actions are confined to the local project environment.
- [EXTERNAL_DOWNLOADS]: The skill invokes standard package managers to install dependencies and scaffold the project via 'pnpm create vite'. These are well-known developer tools and actions are considered safe.
- [DYNAMIC_EXECUTION]: The 'runtime-smoke-sandbox.cjs' script executes the Vite development server in a temporary sandbox directory to perform liveness checks, using proper process management and signal forwarding.
Audit Metadata