react-build-lens

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides optional commands to install additional development tools. These tools are sourced from trusted repositories including Vercel Labs, TanStack, and the skill author's own repository (callumflack/skills).
  • [COMMAND_EXECUTION]: The skill documents standard development commands using npx for package management and a specialized tool named react-doctor. These are standard tools for React development and are used here for diagnostic and installation purposes as requested by the user.
  • [REMOTE_CODE_EXECUTION]: While the skill contains npx commands that fetch and execute packages, these are for well-known and trusted development utilities (like skills and react-doctor). The skill also includes specific instructions to only run these commands after user approval.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines how an agent should handle data and documentation from a repository. It includes standard guardrails to prioritize local documentation over generic training data, which reduces the risk of incorrect or malicious instructions being followed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 11:51 PM