react-dev
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides purely instructional content and code examples for React development without any executable scripts, network exfiltration, or malicious instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external data such as URL parameters, search parameters, and form data. It encourages defensive coding practices to mitigate risks associated with untrusted data.
- Ingestion points: Data ingestion occurs via URL dynamic segments (
params), query strings (searchParams), and form submissions (formData) as documented inSKILL.mdandreferences/react-router.md. - Capability inventory: The skill demonstrates how to perform database mutations (e.g.,
db.user.update) and navigation actions (e.g.,redirect) in response to these inputs inexamples/server-components.md. - Boundary markers: The documentation emphasizes explicit type definitions and structured data handling to maintain clear boundaries between data and logic.
- Sanitization: The skill promotes the use of Zod for search parameter validation in
references/tanstack-router.mdandreferences/react-router.md, and demonstrates regex-based input sanitization inreferences/event-handlers.md.
Audit Metadata