react-build-lens
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides optional commands to install additional development tools. These tools are sourced from trusted repositories including Vercel Labs, TanStack, and the skill author's own repository (callumflack/skills).
- [COMMAND_EXECUTION]: The skill documents standard development commands using
npxfor package management and a specialized tool namedreact-doctor. These are standard tools for React development and are used here for diagnostic and installation purposes as requested by the user. - [REMOTE_CODE_EXECUTION]: While the skill contains
npxcommands that fetch and execute packages, these are for well-known and trusted development utilities (likeskillsandreact-doctor). The skill also includes specific instructions to only run these commands after user approval. - [INDIRECT_PROMPT_INJECTION]: The skill defines how an agent should handle data and documentation from a repository. It includes standard guardrails to prioritize local documentation over generic training data, which reduces the risk of incorrect or malicious instructions being followed.
Audit Metadata