react-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The references/rules/download_rules.sh script facilitates the retrieval of markdown documentation from the official vercel-labs GitHub repository. These downloads are directed toward a trusted organization and are intended for resource maintenance.
  • [COMMAND_EXECUTION]: The skill's documentation includes educational examples of command-line operations, such as using npx svgo for asset optimization and npm for package management. These commands are standard development practices and do not represent malicious execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates by analyzing user-provided source code to suggest optimizations. While this involves processing untrusted data, the skill acts as a static reference guide with no dynamic execution paths that would lead to prompt injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:20 PM
Security Audit — agent-trust-hub — react-best-practices