react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of markdown files providing educational content and code examples for React developers. All patterns identified, such as localStorage access and the use of the svgo utility, are standard industry practices for the stated purpose of React performance optimization.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist in refactoring user-provided React code, which constitutes an ingestion surface for untrusted data. \n
- Ingestion points: User-provided React components and project files analyzed by the agent as described in SKILL.md.\n
- Boundary markers: None explicitly defined in the skill instructions.\n
- Capability inventory: The guidelines mention standard web APIs (fetch, localStorage, document.cookie) and the npx svgo utility.\n
- Sanitization: None provided within the skill guidelines; the skill relies on the underlying agent's safety guardrails.
Audit Metadata