vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEMETADATA_POISONINGDYNAMIC_EXECUTION
Full Analysis
- [METADATA_POISONING]: The skill's metadata and body text repeatedly claim to be authored, maintained, and provided by 'Vercel Engineering'. However, the technical context identifies 'fefogarcia' as the actual author. This mismatch is deceptive regarding the skill's source and authority.
- [DYNAMIC_EXECUTION]: The documentation in 'rules/rendering-hydration-no-flicker.md' and 'AGENTS.md' recommends a pattern using 'dangerouslySetInnerHTML' to inject and execute synchronous inline scripts at runtime. While the provided template is for legitimate UI synchronization (theme management), the recommendation to use script injection qualifies as a dynamic execution pattern.
Audit Metadata