react-vite-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of a series of educational markdown files and configuration templates for React and Vite performance optimization. The instructions align with industry-standard best practices.
- [CREDENTIALS_UNSAFE]: While the skill contains strings that look like API keys (e.g.,
VITE_API_SECRET=sk_live_abc123def456), these are clearly used as examples in sections illustrating incorrect practices. The guide provides explicit warnings against hardcoding real secrets and demonstrates the correct way to handle sensitive data using environment variables without theVITE_prefix. - [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted Node.js packages used in the Vite ecosystem, such as
vite-plugin-svgr,rollup-plugin-visualizer, andvite-plugin-compression. These are standard tools for SVG handling, bundle analysis, and asset compression. - [DATA_EXFILTRATION]: There are no indicators of unauthorized data collection or exfiltration. All external URL references point to trusted documentation sites (vite.dev, react.dev, rollupjs.org) or well-known services (Google Fonts, Sentry) used for legitimate development purposes.
Audit Metadata