The Agent Skills Directory

[SAFE]: The skill serves as a configuration guide for React 19 projects, utilizing industry-standard tools like Vite, TypeScript, and Biome. No malicious patterns, obfuscation, or unauthorized data access were detected.
[EXTERNAL_DOWNLOADS]: The skill provides commands to install common development dependencies via pnpm and run tools via npx. All listed packages (e.g., react, vite, @biomejs/biome, vitest) are well-known, widely used libraries from the official npm registry. No suspicious or unknown sources were identified.
[DATA_EXPOSURE_AND_EXFILTRATION]: The instructions include guidance on managing environment variables via .env.local files and correctly warns the user to never place secrets in the client bundle. The example variables provided are placeholders for API URLs and analytics IDs, which is standard practice.
[COMMAND_EXECUTION]: The shell commands provided (npx biome check, pnpm add, vitest) are standard development tasks intended for local project setup and testing. There is no evidence of arbitrary command injection or dangerous piped remote execution.

tooling-setup