skills/etalab-ia/skills/react-dsfr/Gen Agent Trust Hub

react-dsfr

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide for the @codegouvfr/react-dsfr library, which is the official open-source implementation of the French government's design system.
  • [COMMAND_EXECUTION]: The setup instructions include standard build-time commands such as cp for copying assets to the public directory and react-dsfr update-icons for optimizing icon bundles. These are documented best practices for the library and do not represent malicious shell execution.
  • [DYNAMIC_EXECUTION]: The skill provides a Next.js configuration example that uses dangerouslySetInnerHTML to inject a specific script (getScriptToRunAsap) provided by the library. This script is used to detect the user's theme preference and prevent a "flash" of incorrect color schemes during server-side rendering, which is a standard pattern for this library.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs official packages from the @codegouvfr organization on NPM and provides links to trusted government domains (gouv.fr) and official GitHub repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:48 PM