vite-plus
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Vite+ documentation is broadly consistent with a devtool skill, and the installer appears to match the official docs, so this is not confirmed malware. However, the companion-check behavior is out of scope: it probes local skill directories and encourages transitive installation of additional skills from another repository, which materially increases trust and security risk beyond what a Vite+ helper should do.
Confidence: 82%Severity: 62%
Audit Metadata