vite-plus

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Vite+ documentation is broadly consistent with a devtool skill, and the installer appears to match the official docs, so this is not confirmed malware. However, the companion-check behavior is out of scope: it probes local skill directories and encourages transitive installation of additional skills from another repository, which materially increases trust and security risk beyond what a Vite+ helper should do.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fvite-plus%2F@316a8671e6e0619be793e4e776a0ebd037663110
Security Audit — socket — vite-plus