writing-vite-devtools-integrations
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation details the
ctx.terminals.startChildProcessAPI, which enables Vite plugins to spawn and manage child processes on the host machine. This is a powerful system capability intended for development workflows like running build watchers or dev servers.\n- [EXTERNAL_DOWNLOADS]: The documentation references and encourages the use of multiple official packages from the Vite ecosystem, such as@vitejs/devtools-kit,@vitejs/devtools, and@vitejs/devtools-self-inspect.\n- [DATA_EXFILTRATION]: The skill describes thectx.views.hostStaticmethod, which allows plugins to serve static files from local directories to the DevTools UI. While this grants access to the filesystem, it is presented as a standard method for hosting plugin frontend assets.
Audit Metadata