vercel-react
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is restricted to static documentation and code examples for React/Next.js performance optimization. No executable scripts or malicious logic are present within the rule files.
- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and official repositories from trusted organizations (Vercel) and well-known open-source libraries (e.g., SWR, LRU-cache). These are standard development resources and pose no security risk.
- [METADATA_POISONING]: Although the skill metadata in
SKILL.mdlabels the author as 'vercel' while the package author is 'blockmatic', theREADME.mdexplicitly attributes the original creation to Vercel Engineering. This context indicates the skill is a community-maintained package of public guidelines rather than a deceptive impersonation.
Audit Metadata