bulletproof-react-components
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational reference and code review tool for React development. It provides nine patterns to improve component robustness in environments like Server-Side Rendering (SSR) and concurrent rendering.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided React components. This ingestion of untrusted data constitutes an attack surface. However, the skill does not require or use any sensitive tools, file-write capabilities, or network access, which limits the potential impact of instructions embedded in the processed code to purely textual output bias.
- [DYNAMIC_EXECUTION]: The "Hydration-Proof" pattern recommends the use of
dangerouslySetInnerHTMLto inject a synchronous script. This is a common practice in React for avoiding hydration flashes. The provided example uses a static string that interacts withlocalStorageand does not interpolate untrusted dynamic content into the script, adhering to safe usage of the API.
Audit Metadata