accelint-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or vulnerabilities were identified during the analysis of the skill instructions, reference materials, or automation scripts.\n- [COMMAND_EXECUTION]: The skill includes helper bash scripts (scripts/check-imports.sh, scripts/find-forwardref.sh, scripts/detect-static-jsx.sh) designed to assist users in auditing their local React projects. These scripts use standard command-line tools like grep and do not perform any hidden or dangerous operations.\n- [EXTERNAL_DOWNLOADS]: The documentation references external resources including official React documentation (react.dev), well-known developer repositories (e.g., github.com/vercel-labs/agent-skills), and utility tools like svgo. These references are informative and point to trusted industry sources.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided React components. While it processes untrusted data, it lacks capabilities that could be exploited via indirect prompt injection, such as automated disk writing or network exfiltration of the analyzed content. The skill primarily serves as a knowledge base for providing advice to the user.
Audit Metadata