loom-react
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational documentation for React SPA development. It uses standard, well-known libraries and package managers (Bun, Vite, Jotai).
- [SAFE]: All network operations shown in code snippets (fetch) target local relative API endpoints (e.g., '/api/users', '/api/todos'), which is standard practice for frontend applications and does not involve exfiltration to external domains.
- [SAFE]: The configuration examples (Vite, TypeScript, Vitest) follow industry best practices and do not contain any privilege escalation or persistence mechanisms.
- [SAFE]: No obfuscation, prompt injection, or remote code execution patterns were found. The skill even includes a dedicated 'Anti-Patterns' section that explicitly discourages unsafe or deprecated practices.
Audit Metadata