react-flow

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a scripts/ directory with markdown files containing standard shell commands for project initialization (npm init vite), package management (npm install @xyflow/react), and running test suites (npx playwright test). these are routine development tasks and are consistent with the skill's role as a library reference.
  • [EXTERNAL_DOWNLOADS]: The documentation references official external resources, including the installation of UI components via the shadcn CLI from https://ui.reactflow.dev/. It also lists common ecosystem dependencies such as dagre, elkjs, and d3. All referenced domains and packages are well-known and standard for the React Flow ecosystem.
  • [NO_CODE]: Most of the skill content consists of documentation, type definitions, and code samples intended for educational use. No executable logic is shipped with the skill itself that would run outside of a developer's manual copy-paste or command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:28 AM