vite-advanced
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured templates and rules for Vite 8 configuration. All instructions and scripts are consistent with standard web development practices and no malicious patterns were detected.
- [DATA_EXPOSURE]: Includes explicit security warnings to prevent the accidental exposure of secrets, specifically advising against using
VITE_-prefixed environment variables for sensitive data as they are inlined into the client bundle. - [DATA_EXPOSURE]: Recommends the use of
sourcemap: 'hidden'for production builds, which is a security best practice to provide usable stack traces for error reporting without publicly exposing the original source code. - [REMOTE_CODE_EXECUTION]: References the use of standard, well-known development tools and plugins from the npm registry, such as
vite-plugin-dtsandvite-bundle-visualizer. These are used for their intended purposes within a development workflow. - [COMMAND_EXECUTION]: Employs standard project maintenance commands like
vite build,vite preview, andrm -rf node_modules/.vite. These commands are appropriate for the skill's primary purpose of managing Vite-based build pipelines.
Audit Metadata