programming-in-react
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard instructional content for React development using functional components, TypeScript, and hooks. It follows industry best practices (e.g., proper useEffect cleanup, avoiding React.FC) and does not contain any malicious instructions or command execution patterns.
- [INDIRECT_PROMPT_INJECTION]: The instructions encourage the agent to ingest patterns from the existing codebase, which represents a potential injection surface if the codebase contains malicious instructions, though this is a standard development workflow.
- Ingestion points: SKILL.md and react-testing.md recommend using 'codebase-investigator' to retrieve existing code patterns.
- Boundary markers: The skill includes extensive 'Red Flags' and 'Common Rationalizations' sections that serve as constraints for the agent's behavior.
- Capability inventory: The skill is used in the context of creating and modifying React component files.
- Sanitization: None mentioned for the ingested codebase content, relying on the agent's logic and the provided constraints.
Audit Metadata