react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
references/rules/download_rules.shscript facilitates the retrieval of markdown documentation from the officialvercel-labsGitHub repository. These downloads are directed toward a trusted organization and are intended for resource maintenance. - [COMMAND_EXECUTION]: The skill's documentation includes educational examples of command-line operations, such as using
npx svgofor asset optimization andnpmfor package management. These commands are standard development practices and do not represent malicious execution. - [INDIRECT_PROMPT_INJECTION]: The skill operates by analyzing user-provided source code to suggest optimizations. While this involves processing untrusted data, the skill acts as a static reference guide with no dynamic execution paths that would lead to prompt injection vulnerabilities.
Audit Metadata