litestar-vite
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and interacts with official, well-known software registries and documentation sites. Evidence: References to official Vite documentation (vite.dev) and the project's own GitHub repository (github.com/litestar-org/litestar-vite).
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools for project management, frontend dependency installation, and production builds. Evidence: Use of the litestar assets CLI to invoke npm, pnpm, or bun for managing the frontend toolchain.
- [INDIRECT_PROMPT_INJECTION]: The skill documents mechanisms for processing and rendering external data via HTMX, Inertia, and Event Streams. It includes specific guidance on security hardenings for these surfaces. Evidence: Documentation of a restricted expression interpreter for HTMX JSON templates in version 0.29.0, which limits the available JavaScript execution environment to prevent exploitation of the template rendering surface.
Audit Metadata