vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a structured repository of performance optimization rules for React and Next.js applications, attributed to Vercel Engineering.
- [SAFE]: Includes explicit security guidance, such as the rule to authenticate Server Actions ('rules/server-auth-actions.md'), which correctly identifies Server Actions as public endpoints and recommends internal authorization checks.
- [SAFE]: Contains best practice recommendations for handling concurrency and preventing data leaks in Server-Side Rendering (SSR) environments ('rules/server-no-shared-module-state.md').
- [SAFE]: Uses standard web development patterns in examples, such as 'dangerouslySetInnerHTML' for theme initialization scripts to prevent hydration flickering ('rules/rendering-hydration-no-flicker.md'). These are documented for educational purposes and do not involve unsanitized remote input.
- [SAFE]: All referenced libraries (e.g., SWR, LRU-Cache, Lucide React, MUI) are well-known, reputable open-source packages from established ecosystems.
Audit Metadata