Skills
Navigate
skills/alismx/claude-skills/react-expert/Gen Agent Trust Hub

react-expert

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching and processing data from external sources, creating a surface for potential indirect prompt injection attacks. \n
  • Ingestion points: External data enters the agent context through the useApi hook in references/hooks-patterns.md, the fetch API in references/server-components.md, and the useQuery hook in references/state-management.md. \n
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for the data fetched from these external endpoints. \n
  • Capability inventory: The skill allows for the creation and modification of React component files and the execution of the tsc compiler command as part of the validation workflow in SKILL.md. \n
  • Sanitization: There are no explicit instructions or examples for sanitizing, escaping, or validating API responses before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 11:04 PM