vite-advanced

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured templates and rules for Vite 8 configuration. All instructions and scripts are consistent with standard web development practices and no malicious patterns were detected.
  • [DATA_EXPOSURE]: Includes explicit security warnings to prevent the accidental exposure of secrets, specifically advising against using VITE_-prefixed environment variables for sensitive data as they are inlined into the client bundle.
  • [DATA_EXPOSURE]: Recommends the use of sourcemap: 'hidden' for production builds, which is a security best practice to provide usable stack traces for error reporting without publicly exposing the original source code.
  • [REMOTE_CODE_EXECUTION]: References the use of standard, well-known development tools and plugins from the npm registry, such as vite-plugin-dts and vite-bundle-visualizer. These are used for their intended purposes within a development workflow.
  • [COMMAND_EXECUTION]: Employs standard project maintenance commands like vite build, vite preview, and rm -rf node_modules/.vite. These commands are appropriate for the skill's primary purpose of managing Vite-based build pipelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:55 AM