vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a legitimate knowledge base for React and Next.js performance best practices. The technical content is consistent with industry standards and official guidance from Vercel Engineering.
- [EXTERNAL_DOWNLOADS]: The documentation references and recommends the use of reputable libraries such as
better-all(for async parallelization),lru-cache(for cross-request caching), andswr(for data fetching). These are well-known, high-quality resources in the React ecosystem. - [COMMAND_EXECUTION]: The README file describes standard project maintenance scripts using
pnpm(e.g.,pnpm build,pnpm validate). These are common development tools used for building the rule repository and do not exhibit malicious intent or target user credentials. - [DYNAMIC_EXECUTION]: One of the rendering performance rules demonstrates a pattern for preventing hydration flickering by using
dangerouslySetInnerHTMLto inject a small, synchronous script for theme initialization. This is a recognized and accepted pattern in React/Next.js development and is provided here as a static code template.
Audit Metadata