wiki-vitepress
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to run 'npm install' and 'npm run docs:build' within a generated directory to manage dependencies and generate the static site output. This is a standard and necessary part of the VitePress build process.
- [DYNAMIC_EXECUTION]: The skill facilitates the dynamic generation of TypeScript configuration and theme files (e.g., 'config.mts', 'index.ts') which are required for the VitePress site's functionality, specifically for Mermaid diagram rendering and theme customization. These scripts run during the build or in the browser context.
- [INDIRECT_PROMPT_INJECTION]: Since the skill processes externally generated Markdown files into a web site, it acknowledges the risk of untrusted content. It includes a specific evidence chain by noting ingestion of markdown pages and providing sanitization instructions: it explicitly commands the maintenance of strict security boundaries in the Mermaid diagram renderer to prevent arbitrary code execution from malicious diagram syntax.
Audit Metadata