vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains meta-instructions regarding the agent's underlying configuration, such as referencing the use of
~/.claude/settings.jsonandANTHROPIC_DEFAULT_*_MODELenvironment variables for model selection. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by design as it is intended to process and refactor user-provided source code.
- Ingestion points: User-provided React components and Next.js pages.
- Boundary markers: Absent; no specific delimiters or instructions to ignore embedded directives are defined for processed code.
- Capability inventory: The skill uses
Read,Write,Edit,Grep, andBashtools to interact with the project environment. - Sanitization: No sanitization or validation of user-provided code is specified before processing.
- [EXTERNAL_DOWNLOADS]: The skill references technical documentation and configuration guidelines hosted in the Vercel Labs GitHub organization. It also suggests the implementation of standard external packages such as
better-all,swr, andnext/dynamicin development workflows.
Audit Metadata