react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and optimization rules reference official documentation and open-source libraries such as SWR, LRU-cache, and better-all. These references are used to provide implementation context and are sourced from trusted vendors and well-known contributors in the React ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a framework for processing and refactoring user-supplied source code, creating an attack surface for indirect instructions.
- Ingestion points: The agent ingests user-provided React and Next.js files (e.g., components, API routes, hooks) to apply performance optimizations.
- Boundary markers: The rule files utilize structured Markdown with explicit 'Incorrect' and 'Correct' labels and code blocks to clearly delineate optimization logic from the code being processed.
- Capability inventory: Standard agent tools for file system access (read/write) are assumed to be available to implement the refactoring suggested by the rules.
- Sanitization: The skill promotes the use of hardened, explicit code patterns (such as using ternary operators instead of the && operator for conditional rendering) to prevent unexpected rendering behaviors.
Audit Metadata