vike@0.4.263
(Replaces Next.js/Nuxt) 🔨 Build mission-critical applications with stability and development freedom.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package performs an unexpected project-local agent skill write and may commit it automatically when the development server starts. The skill content is limited to Vike documentation, and the helper has CI and configuration opt-outs, so this warrants a warning rather than a block.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Starting the Vike Vite development server; the task runs after a 15-second delay unless skipped or disabled.
Impact
Project-local agents may load the added Vike documentation guidance, and the package may create a Git commit without an explicit request to add the skill.
Mechanism
Discovers or accepts skill directories, writes `vike/SKILL.md`, then stages and commits those files with Git hooks disabled.
AI rationale
The package performs an unexpected project-local agent skill write and may commit it automatically when the development server starts. The skill content is limited to Vike documentation, and the helper has CI and configuration opt-outs, so this warrants a warning rather than a block.
Evidence
dist/node/vite/plugins/pluginDev.jsdist/node/vite/plugins/pluginDev/autoAddVikeSkill.js**/skills/vike/SKILL.md (under discovered or configured skill directories)
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The Vite development plugin schedules the skill-writing helper 15 seconds after server startup.
- By default, the helper discovers existing skill directories and writes `vike/SKILL.md` into them.
- It stages and commits the new skill files with a fixed Vike identity and `--no-verify`, bypassing Git hooks.
- The generated skill points to Vike documentation; the inspected code shows no network request or credential collection.
Evidence against
- The helper skips CI and can be disabled with `ai.skill: false`.
- By default it targets existing skill directories, and its Git commit is limited to the skill files.
- The generated skill contains a Vike documentation link, with no review verdict instructions or other apparent control payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
5 flaggeddist/server/runtime/createDevMiddleware.jsView file
4const p = '../../node/createDevMiddleware.js';
L5: const { createDevMiddleware } = await import(/*webpackIgnore: true*/ /* @vite-ignore */ p);
L6: return createDevMiddleware(...args);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/server/runtime/createDevMiddleware.jsView on unpkg · L4dist/node/vite/plugins/build/pluginDistFileNames.jsView file
2// Attempt to preserve file structure of `.page.js` files:
L3: // - https://github.[redacted]
L4: // - Blocker: https://github.com/rollup/rollup/issues/4724
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/node/vite/plugins/build/pluginDistFileNames.jsView on unpkg · L2package.jsonView file
Findings
1 Critical1 High5 Medium5 Low
CriticalManifest Confusionpackage.json
HighPrevious Version Dangerous Deltadist/node/vite/plugins/pluginDev/autoAddVikeSkill.js
MediumDynamic Requiredist/server/runtime/createDevMiddleware.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/node/vite/plugins/pluginDev.js
LowScripts Present
LowWeak Cryptodist/node/vite/plugins/build/pluginDistFileNames.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to vike@0.4.263.
See all versions of vike for other recorded verdicts.
- Review the evidence and your use of vike@0.4.263 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.