litestar-vite
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the Litestar CLI to manage the frontend build pipeline. This includes commands such as
litestar assets installfor dependency management,litestar assets buildfor creating production bundles, andlitestar assets deployfor syncing assets to remote storage. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading dependencies from public registries (NPM, PyPI) and interacting with external cloud storage services (S3, Google Cloud Storage, Azure) for deployment purposes. These operations are standard for the tool's purpose and utilize project-specific configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through route handler responses (e.g., Inertia page props and HTMX fragments) which are then interpolated into frontend templates.
- Ingestion points: Data enters the system via
ComponentResponseprops,InertiaResponsecontent, andRequestobjects processed by the route handlers. - Boundary markers: Data is primarily delimited using JSON serialization for transmission between the backend and frontend.
- Capability inventory: The skill possesses capabilities to execute build commands, perform network operations via deployment, and modify local generated files.
- Sanitization: The skill references a CSP-safe HTMX JSON-template interpreter designed to sanitize and restrict evaluation of embedded expressions.
- [DYNAMIC_EXECUTION]: The skill supports the execution of user-defined commands and scripts through the
extra_commandsconfiguration inTypeGenConfigand various command overrides inRuntimeConfig. These are used to run build tools and custom generation steps within the development and build lifecycle.
Audit Metadata