vibe-coding-review-react
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional logic for an AI agent to perform code reviews. It does not contain any executable scripts, shell commands, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface because it processes untrusted user-provided source code during the review process. However, it does not have any sensitive capabilities (such as file system writes or network access) that could be exploited via injection.
- Ingestion points: User-provided code snippets or project files passed to the agent for review.
- Boundary markers: The instructions use clear section headers, but do not specify explicit delimiters for user content.
- Capability inventory: No tools or dangerous APIs are requested or used.
- Sanitization: No explicit filtering or sanitization of input code is defined.
- [EXTERNAL_DOWNLOADS]: The skill references React best practices from Vercel Labs' public repository. Vercel is a well-known and trusted service, and these references are used for documentation purposes rather than runtime code execution.
Audit Metadata