react-vite-expert
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility Python scripts (
scripts/create_component.py,scripts/create_hook.py, andscripts/analyze_bundle.py) that facilitate developer workflows by generating boilerplate code and analyzing project dependencies. - [EXTERNAL_DOWNLOADS]: Reference files like
assets/package.json.exampleandreferences/performance_optimization.mdpoint to well-known and trusted React ecosystem libraries, includingvitest,zustand, androllup-plugin-visualizeravailable via official registries. - [INDIRECT_PROMPT_INJECTION]: The bundle analysis script (
scripts/analyze_bundle.py) ingests project metadata (package.json) and source code to identify optimization opportunities. While this involves processing local files that could technically contain malicious content, the script's logic is restricted to non-executable string parsing for import statements. - [SAFE]: No obfuscation, credential exposure, or unauthorized network operations were detected. The skill follows industry-standard security and development patterns for React applications.
Audit Metadata