react-agents-review
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality instructional content for React code reviews, covering critical safety areas such as the Rules of Hooks, TypeScript safety, and performance optimization.
- [SAFE]: Includes explicit security checks for Cross-Site Scripting (XSS) and mandates the use of sanitization libraries like DOMPurify when rendering raw HTML content.
- [SAFE]: Recommends secure state management practices, such as keeping secrets server-side and using httpOnly cookies for sensitive tokens to prevent XSS-based data theft.
- [SAFE]: Although the skill processes untrusted user code (representing an indirect prompt injection surface), this is essential for its primary function as a code review tool and it does not introduce any dangerous execution capabilities (Ingestion point: user-provided source code; Boundary markers: none; Capability inventory: shell and file access via the Claude Code platform; Sanitization: the skill guides the agent to verify sanitization within the code it reviews).
Audit Metadata