skills/firstsun-dev/skills/react/Gen Agent Trust Hub

react

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill describes a legitimate framework for rendering React components from JSON specifications.
  • No Obfuscation: No hidden, encoded, or deceptive content was found in the documentation or code examples.
  • Safe Dependency Usage: The skill references standard packages such as zod for validation and vendor-scoped packages @json-render/react and @json-render/core for core functionality.
  • Input Validation: The documentation explicitly demonstrates using Zod to define and validate component properties, which is a primary defense against malformed or malicious data injection in data-driven UIs.
  • Controlled Capabilities: Dynamic expressions such as $computed and $template are handled by the framework's logic using pre-registered functions rather than arbitrary code execution via unsafe methods like eval().
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 08:32 AM