vite-vue
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a repository from an external source at
https://github.com/Eng0AI/vite-vue-template.git. - [COMMAND_EXECUTION]: The skill executes several shell commands, including
npm install,npm run build, and deployment commands for Vercel and Netlify.npm installspecifically poses a risk as it automatically executes any lifecycle scripts (preinstall, postinstall) defined in the downloaded repository. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests and executes content from an external repository without verification.
- Ingestion points:
SKILL.md(via thegit cloneinstruction). - Boundary markers: None.
- Capability inventory: Shell execution (
npm,git,rm,mv), network operations (viavercelandnetlifyCLI tools), and file system access. - Sanitization: None detected; the agent is instructed to run commands directly on the cloned content.
Audit Metadata