use-vp-config
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various commands using the
vp(Vite+) CLI tool, such asvp install,vp config,vp check, andvp run. These commands are standard for managing project dependencies and build tasks within the Vite+ ecosystem. - [EXTERNAL_DOWNLOADS]: The skill directs the agent to install the
@liangmi/vp-configpackage from a package registry. It also referencesvite-plusand@voidzero-dev/vite-plus-coreas necessary dependencies. These resources are consistent with the skill's purpose of integrating with the Vite+ development environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes project files including
package.json,vite.config.ts, and repository documentation (AGENTS.md) to inform configuration choices. This represents a potential surface for indirect prompt injection if those files contain malicious instructions; however, the skill's operations are scoped to standard build-tool configuration, posing a low risk.
Audit Metadata