viteplus
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with well-known technology ecosystem components, specifically the VitePlus toolchain from VoidZero. References to
voidzero-dev/setup-vp@v1and thevpcommand-line utility are consistent with legitimate developer tooling. - [SAFE]: The migration process focuses on standardizing project configuration files (
package.json,vite.config.ts,.github/workflows/) and updating test imports to use native toolchain equivalents. No unauthorized file access or exfiltration of sensitive data (e.g., credentials, SSH keys) was found. - [SAFE]: Package management and execution commands like
vp install,vp update,vpx, andvp dlxare documented as equivalents to standard tools likenpm,pnpm, andnpx. Their usage is scoped to project dependency management and runtime operations. - [SAFE]: No obfuscated code, prompt injection attempts, or hidden instructions were identified across the 22 files analyzed. The skill maintains transparency in its operations and provides clear migration paths for developers.
Audit Metadata