vite-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and examples for Vite configuration, build optimization, and plugin usage. All provided patterns are standard for the modern frontend development ecosystem.
- [SAFE]: The documentation includes a dedicated security section that correctly identifies and warns against common pitfalls, such as leaking environment variables to the client bundle via the
VITE_prefix and improper usage of theloadEnvfunction that could expose server-side secrets. - [INDIRECT_PROMPT_INJECTION]: The skill documents how to create custom plugins with
transformhooks and handle data ingestion. - Ingestion points: Custom plugin
transform(code, id)hook (SKILL.md). - Boundary markers: Not explicitly mentioned in the minimal example provided.
- Capability inventory: Mentions build output generation (file writes) and dev server proxying (network operations).
- Sanitization: Not present in the minimal transformation example, as it is a template for code processing.
Audit Metadata