ClawHub
Back to skill

Security audit

Vue 2 项目 Webpack 升级到 Vite 构建工具

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Vue migration guide with clearly disclosed project file changes, but users should be careful around the deletion steps.

Install only if you want an agent to help perform a real Vue 2/Webpack to Vite migration. Before using the cleanup steps, confirm you are in the intended project root, have a backup or Git commit, review the exact files to be removed, and avoid the non-Git rm fallback unless you are certain the targets are disposable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tool Parameter Abuse

High
Category
Tool Misuse
Content
```bash
# 删除 Webpack 构建目录
git rm -rf build/ config/
# 删除 Babel/PostCSS 配置
git rm -f .babelrc .postcssrc.js babel.config.js
# 删除旧锁文件（pnpm 项目不需要 npm/yarn 锁文件）
Confidence
95% confidence
Finding
rm -rf build/ config/

Tool Parameter Abuse

High
Category
Tool Misuse
Content
# 删除 Babel/PostCSS 配置
git rm -f .babelrc .postcssrc.js babel.config.js
# 删除旧锁文件（pnpm 项目不需要 npm/yarn 锁文件）
git rm -f package-lock.json yarn.lock 2>/dev/null || true
```

如果项目未纳入 Git 版本控制，使用以下命令（**不可撤销，执行前务必确认**）：
Confidence
90% confidence
Finding
rm -f package-lock.json yarn.lock 2>/dev/

Tool Parameter Abuse

High
Category
Tool Misuse
Content
如果项目未纳入 Git 版本控制，使用以下命令（**不可撤销，执行前务必确认**）：

```bash
rm -rf build/ config/
rm -f .babelrc .postcssrc.js babel.config.js
rm -f package-lock.json yarn.lock
```
Confidence
97% confidence
Finding
rm -rf build/ config/

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.