react-frontend
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a technical reference for React development, providing patterns for state management, performance optimization, and testing. It does not contain executable code beyond standard development scripts (Vitest, Playwright).
- [SAFE]: Documentation includes placeholder credentials in
references/e2e-testing.md(e.g.,testuser@example.com,TestPassword123!) used strictly for illustrating test automation setup. - [SAFE]: The skill incorporates security best practices, such as instructing the agent to treat Server Actions as public endpoints and providing warnings against interpolating user data into
dangerouslySetInnerHTMLblocks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review frontend source code (
.tsx,.ts,.jsx). This presents an indirect injection surface if the code being reviewed contains malicious instructions. However, the skill focuses on architectural logic and static patterns, minimizing the risk of the agent following instructions embedded in the reviewed data. The severity is low as it defines the capability tier for code review tasks.
Audit Metadata