The Agent Skills Directory

[SAFE]: The skill serves as a documentation-based guide for performance optimization. It does not contain executable logic, shell scripts, or commands that could compromise the host environment.\n- [SAFE]: All external URLs and package dependencies trace back to trusted organizations (Vercel) or well-known, established community maintainers (e.g., shuding, isaacs). References to libraries like better-all and lru-cache are legitimate and consistent with the skill's optimization goals.\n- [SAFE]: The use of dangerouslySetInnerHTML in the hydration rules is a standard React pattern for injecting essential, static scripts (like theme detection) before hydration, and does not introduce XSS or other vulnerabilities in this implementation.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and suggest changes to untrusted source code. While this provides a surface for indirect prompt injection, it is an inherent part of the tool's primary purpose for code review and optimization. The risk is minimized as the skill itself does not have autonomous execution capabilities beyond providing instructions to the agent.

vercel-react-best-practices