Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add OpenAEC-Foundation/OpenAEC-Workspace-Composer --skill vite-errors-dependencygit clone --depth 1 https://github.com/OpenAEC-Foundation/OpenAEC-Workspace-ComposerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openaec-foundation/openaec-workspace-composer/vite-errors-dependency)<a href="https://agentmods.dev/skills/openaec-foundation/openaec-workspace-composer/vite-errors-dependency"><img src="https://agentmods.dev/badge/skills/openaec-foundation/openaec-workspace-composer/vite-errors-dependency/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/openaec-foundation/openaec-workspace-composer/vite-errors-dependency"><img src="https://agentmods.dev/badge/skills/openaec-foundation/openaec-workspace-composer/vite-errors-dependency.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.02249 |
| Opus 5 | $0.00062 | $0.01125 |
| Sonnet 5 | $0.00025 | $0.00450 |
| Haiku 4.5 | $0.00012 | $0.00225 |
Grade C, and why
vite-errors-dependency scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf node_modules/.vite How it starts
The opening of the file, as written. The whole thing — 216 lines — stays where its author put it; the contents beside it link to each section on GitHub.
vite-errors-dependency
Quick Reference
Pre-Bundling Overview
Vite pre-bundles dependencies in dev mode ONLY. It converts CJS/UMD packages to ESM and collapses large dependency trees into single modules. The cache lives at node_modules/.vite.
| Version | Pre-Bundling Engine | Config Key for Engine Options |
|---|---|---|
| Vite 5 | esbuild | optimizeDeps.esbuildOptions |
| Vite 6–7 | esbuild | optimizeDeps.esbuildOptions |
| Vite 8 | Rolldown | optimizeDeps.rolldownOptions |
NEVER assume pre-bundling affects production builds. Production uses Rollup (v5–v7) or Rolldown (v8) natively with @rollup/plugin-commonjs or built-in CJS support.
Critical Warnings
NEVER exclude a CJS dependency from pre-bundling via optimizeDeps.exclude. The browser cannot load CommonJS modules natively. Excluding a CJS package breaks module resolution at runtime.
NEVER edit files inside node_modules/ without also clearing the Vite cache (node_modules/.vite) and using --force. The browser aggressively caches pre-bundled deps with max-age=31536000,immutable.
ALWAYS add linked monorepo dependencies that do NOT export ESM to optimizeDeps.include. Vite skips pre-bundling for linked deps by default, assuming they are ESM source code.
ALWAYS restart the dev server with --force after modifying linked dependency source code in a monorepo.
Debugging Flowchart
Dev server error or unexpected behavior with a dependency?
│
├─ Error: "Failed to resolve import" or "does not provide an export named"
│ ├─ Is the package CJS-only?
│ │ ├─ YES → Is it in optimizeDeps.exclude?
│ │ │ ├─ YES → REMOVE it from exclude. CJS MUST be pre-bundled.
│ │ │ └─ NO → Add to optimizeDeps.include explicitly.
│ │ └─ NO (ESM) → Check package.json "exports" field for correct conditions.
│ │
│ └─ Is it a monorepo linked dep?
│ ├─ Does it export ESM? → No action needed (Vite treats as source).
│ └─ Does it export CJS? → Add to optimizeDeps.include.
│
├─ Error: "Outdated pre-bundle" or stale module content
│ ├─ Did you manually edit node_modules/?
│ │ ├─ YES → Run: vite --force AND clear browser cache.
│ │ └─ NO → Delete node_modules/.vite, restart dev server.
│ └─ Check: Did lockfile, vite.config, NODE_ENV, or patches change?
│ └─ YES → Vite should auto-invalidate. If not, run: vite --force.
│
├─ Slow dev server startup (many HTTP requests)
│ ├─ Check Network tab: hundreds of requests to one dependency?
│ │ └─ YES → Add that dependency to optimizeDeps.include.
│ │ Example: lodash-es triggers 600+ module requests without pre-bundling.
│ └─ Check: Are there undiscovered deps from plugin transforms?
│ └─ YES → Add to optimizeDeps.include (auto-discovery misses these).
│
└─ Import works in dev but fails in production (or vice versa)
└─ Pre-bundling is dev-only. Production uses a different CJS handling path.
Check build output for CJS interop issues separately.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 216 lines · 124 tokens per session scan C d99397ffd653
vite-errors-dependency is a skill published in the GitHub repository OpenAEC-Foundation/OpenAEC-Workspace-Composer (5 stars, last pushed 5mo ago), licensed MIT. It adds 124 tokens to every session and 2,249 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
aios-arch-health
Deterministic architecture-health governance for repositories. Use when a project needs complexity, duplication, dependency, test, coverage, mutation, QA, performance, database, concurrency, or failure-injection evidence; evidence provenance and artifact digests; protected specification, test, quality-profile, or QA…
aios-exec
A controlled workflow for carrying out clearly defined changes and checks in a project workspace. It covers code, bug fixes, documentation, scripts, tests, linting, type checks, builds, interface changes, and deployment preparation.
ha-logs
A read-only troubleshooting skill for querying Hope Agent’s local SQLite databases, which store logs, conversations, and background-job status.
ha-self-diagnosis
Self-understanding and issue reporting for Hope Agent itself. Use when the user asks how Hope Agent works internally, asks about its own source code/docs/runtime behavior, reports a bug/failure/slowness/crash, asks to diagnose logs, or asks to create/submit a GitHub issue for a bug, feature request, or improvement…
ha-debug
Hope-native debugging for code failures, regressions, crashes, flaky behavior, and bad output: reproduce or characterize, rank falsifiable hypotheses, fix the smallest root cause, and prove the failing path.
defect-detection-ai
AI-powered construction defect detection using computer vision. Identify cracks, spalling, corrosion, and other defects in concrete, steel, and building components from images and video.