vercel-react-best-practices

SUSPICIOUS: the core React/Next.js guidance is benign documentation-like content, but the skill is not narrowly scoped to that purpose. It embeds a broader operational framework that mandates unrelated third-party tools, command proxying, and persistent memory writes, creating medium security risk despite low evidence of outright malware.