litestar-vite

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the Litestar CLI to manage the frontend build pipeline. This includes commands such as litestar assets install for dependency management, litestar assets build for creating production bundles, and litestar assets deploy for syncing assets to remote storage.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading dependencies from public registries (NPM, PyPI) and interacting with external cloud storage services (S3, Google Cloud Storage, Azure) for deployment purposes. These operations are standard for the tool's purpose and utilize project-specific configurations.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through route handler responses (e.g., Inertia page props and HTMX fragments) which are then interpolated into frontend templates.
  • Ingestion points: Data enters the system via ComponentResponse props, InertiaResponse content, and Request objects processed by the route handlers.
  • Boundary markers: Data is primarily delimited using JSON serialization for transmission between the backend and frontend.
  • Capability inventory: The skill possesses capabilities to execute build commands, perform network operations via deployment, and modify local generated files.
  • Sanitization: The skill references a CSP-safe HTMX JSON-template interpreter designed to sanitize and restrict evaluation of embedded expressions.
  • [DYNAMIC_EXECUTION]: The skill supports the execution of user-defined commands and scripts through the extra_commands configuration in TypeGenConfig and various command overrides in RuntimeConfig. These are used to run build tools and custom generation steps within the development and build lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:16 AM