react
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill describes a legitimate framework for rendering React components from JSON specifications.
- No Obfuscation: No hidden, encoded, or deceptive content was found in the documentation or code examples.
- Safe Dependency Usage: The skill references standard packages such as
zodfor validation and vendor-scoped packages@json-render/reactand@json-render/corefor core functionality. - Input Validation: The documentation explicitly demonstrates using Zod to define and validate component properties, which is a primary defense against malformed or malicious data injection in data-driven UIs.
- Controlled Capabilities: Dynamic expressions such as
$computedand$templateare handled by the framework's logic using pre-registered functions rather than arbitrary code execution via unsafe methods likeeval().
Audit Metadata