frontend-dev-guidelines
Warn
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation contains multiple code examples (notably in 'resources/complete-examples.md') that reference unverified third-party libraries such as 'react-hook-blog' and '@hookblog/resolvers/zod'. In a standard React development ecosystem, these are typically 'react-hook-form' and '@hookform/resolvers'. Referencing unknown packages in development guidelines creates a significant supply chain risk, as users or agents following these instructions may inadvertently install malicious typosquatted packages or untrusted code.
- [REMOTE_CODE_EXECUTION]: Several snippets use non-standard JSX tags like '' in place of the standard '' tag. This suggests corrupted content or significant technical inaccuracies in the provided code patterns, which could lead to broken builds or insecure implementations if used in a production environment.
Audit Metadata