vite
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Vite 8 (Rolldown-powered). The content is educational, following official Vite documentation and best practices for TypeScript and ESM.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and official ecosystems, including Vite, Nuxt, SvelteKit, SolidStart, and Nitro. All linked domains (vite.dev, nuxt.com, nitro.build, etc.) are legitimate and established services within the web development community.
- [COMMAND_EXECUTION]: The documentation includes standard CLI commands (e.g.,
vite build) and programmatic APIs (createServer,resolveConfig). These are core functionalities of the Vite build tool and are presented here for educational purposes. - [DATA_EXFILTRATION]: The skill describes the handling of environment variables through
loadEnvandimport.meta.env. It correctly notes the security boundary where only variables prefixed withVITE_are exposed to the client-side, which is a standard safety feature of the tool. - [PROMPT_INJECTION]: No evidence of prompt injection, role-play instructions, or attempts to bypass AI safety guidelines were found. The instructions focus entirely on technical implementation details for Vite projects.
Audit Metadata