vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and examples reference several well-known libraries such as
better-all,lru-cache,swr,zod, andlucide-react. These are standard dependencies within the React and Next.js ecosystem. - [DATA_EXFILTRATION]: The guidelines provide instructions for using client-side storage mechanisms, including
localStorage,sessionStorage, anddocument.cookie. These are documented as best practices for performance optimizations such as caching and theme persistence. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection because it is designed to analyze and modify untrusted, user-supplied source code.
- Ingestion points: User-provided React and Next.js source code (SKILL.md).
- Boundary markers: No specific delimiters or safety instructions are defined for the agent when processing user code.
- Capability inventory: The agent has the capability to generate and refactor code based on the provided optimization rules.
- Sanitization: No sanitization logic is provided as the skill consists of instructional documentation.
- [COMMAND_EXECUTION]: The documentation includes instructional examples for using developer utilities like
npx svgoto optimize SVG assets.
Audit Metadata