react-impl-project-setup
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for standard project initialization using official tools like
npm create vite@latestand packages from the public NPM registry. - [SAFE]: It contains explicit security warnings and 'anti-pattern' documentation specifically designed to prevent the exposure of secrets in client-side bundles (via the
VITE_prefix rule) and the accidental commitment of local environment files to version control. - [SAFE]: Recommended configurations for TypeScript (
strict: true) and ESLint follow industry-standard security and stability best practices, helping to prevent common coding errors. - [SAFE]: All external documentation links point to official repositories and well-known service domains such as vite.dev, react.dev, and typescriptlang.org.
Audit Metadata