hooks-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references technical documentation from official React sources (react.dev), personal blogs from React core team members (overreacted.io), and the author's own repository on GitHub. These are well-known, trusted resources.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and review React code snippets provided by user input, which represents an ingestion surface for untrusted data.
- Ingestion points: User-provided React component source code and hook logic provided for review.
- Boundary markers: None explicitly defined in the skill instructions to delimit untrusted code snippets from the model's reasoning process.
- Capability inventory: The skill is limited to Read and Grep operations; it does not possess network exfiltration, arbitrary command execution, or file system writing capabilities.
- Sanitization: No specific sanitization or escaping protocols are defined for the processed React code.
Audit Metadata