Vue 2 项目 Webpack 升级到 Vite 构建工具

• Analyzed: May 12, 2026, 5:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0141a21e0c5f33f2b7b8e1ea3578a5fe8681be4fc7682f3c2bba47b051678f2e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle facilitates Vue 2 to Vite migration using high-risk operations including recursive file deletion, bulk source code refactoring via shell commands (`sed` in `migration-steps.md`), and automated FTP deployment (`ftp-deploy.js`). While these capabilities are aligned with the stated purpose and the documentation includes security-conscious advice regarding axios CVEs (e.g., CVE-2025-27152), the reliance on broad shell execution and plaintext credential templates in `deploy-config.md` presents a significant attack surface for the OpenClaw agent.