devtools-vite-plugin
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local shell commands through two primary features:
- Plugin Marketplace: The marketplace subsystem (
package-manager.ts) executes package manager installation commands (pnpm,npm, oryarn install) to add devtools extensions to the project. - Editor Integration: The 'Go to Source' feature utilizes
launch-editoror user-definededitor.openfunctions to execute shell commands that open specific files at designated line and column numbers in the local development environment. - [EXTERNAL_DOWNLOADS]: The plugin marketplace functionality downloads third-party packages from official registries during the automated installation of devtools plugins. These downloads are triggered by developer-initiated events within the devtools client.
- [PROMPT_INJECTION]: The skill exhibits an indirect injection surface by processing external data such as console logs and HTTP requests to dev server middleware endpoints (
/__tsd/*). - Ingestion points: Console log streams and dev server middleware endpoints.
- Boundary markers: Not explicitly defined in the documentation for console piping.
- Capability inventory: The plugin has the capability to modify project source code (AST transforms) and execute shell commands (package installation).
- Sanitization: Uses established parsers like
oxc-parserfor code transformations, though the marketplace system responds to event-driven inputs.
Audit Metadata