vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and JSON metadata. It provides architectural and coding guidelines for React and Next.js performance.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted external resources, including React's official documentation, Next.js documentation, and Vercel's engineering blog. These references are used for educational purposes and do not involve downloading or executing untrusted code.
- [COMMAND_EXECUTION]: While the documentation mentions commands like
pnpm buildandnpx svgo, these are provided as standard developer instructions for project maintenance and asset optimization, rather than hidden or malicious command execution. - [DATA_EXFILTRATION]: There are no patterns suggesting unauthorized data access or exfiltration. Code examples using
fetch()orSWRare illustrative of standard web development patterns for data retrieval. - [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were found. The instructional language is focused on technical best practices.
Audit Metadata