vite
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no malicious code, prompt injections, or unauthorized data access patterns. It is a legitimate collection of documentation and configuration guides for the Vite build tool.
- [EXTERNAL_DOWNLOADS]: The skill correctly references official Vite and Rolldown packages from the public npm registry. These are well-known, trusted resources within the web development ecosystem.
- [COMMAND_EXECUTION]: Documentation includes standard CLI commands for Vite (e.g.,
vite,vite build) which are essential for the tool's primary purpose and do not pose a security risk in this context. - [REMOTE_CODE_EXECUTION]: The skill provides examples of Vite's SSR API, such as
ssrLoadModule. While this API executes code at runtime, it is a standard and documented feature of Vite used for server-side rendering development.
Audit Metadata