vercel-react-view-transitions
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill directs the agent to audit the local codebase to identify components like
<Link>,<Suspense>, and page routes. This is a standard procedure for a development-focused skill and does not involve accessing sensitive system files or credentials. - [COMMAND_EXECUTION]: A specific command (
grep -r "transitionTypes" node_modules/next/dist/) is suggested to detect feature availability in the local environment. This is a benign read-only operation used for configuration checking. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process and analyze local application code to generate implementation plans. This constitutes an ingestion point for untrusted data, which is a standard attack surface for coding assistants. However, the skill does not possess capabilities that would allow for high-severity exploitation.
- Ingestion points: Local codebase (as described in
references/implementation.md). - Boundary markers: None present.
- Capability inventory: Local file auditing and React/CSS code generation.
- Sanitization: No specific sanitization logic is provided as it is a documentation/guidance skill.
Audit Metadata