vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a knowledge base for React development. All provided code snippets are pedagogical examples of 'Incorrect' vs. 'Correct' implementations of performance patterns such as eliminating waterfalls, optimizing bundle sizes, and improving rendering efficiency.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted external resources including official documentation for React (react.dev), Next.js (nextjs.org), and SWR (swr.vercel.app). It also references a specific utility repository 'shuding/better-all' on GitHub, which is associated with a known engineer from Vercel.
- [COMMAND_EXECUTION]: The README.md includes standard development instructions for installing dependencies using
pnpm installand running build/validation scripts. These are standard procedures for managing a documentation-based repository and do not involve suspicious or unauthorized command execution. - [PROMPT_INJECTION]: The content was analyzed for prompt injection vectors such as 'Ignore previous instructions' or 'Developer mode' overrides. No such patterns were found; the text remains strictly focused on technical performance guidelines.
- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. The guidelines actually promote secure practices, such as verifying authentication and authorization inside Server Actions to prevent unauthorized mutations.
Audit Metadata