setup-react-rules
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The primary purpose of this skill is to enhance security. It implements automated checks to prevent the use of high-risk React patterns such as dangerouslySetInnerHTML and direct .innerHTML assignments, which are common XSS vectors. It also blocks the use of dangerous JavaScript functions like eval() and new Function().\n- [COMMAND_EXECUTION]: The skill utilizes shell scripts (react-rules-check.sh and tailwind-check.sh) as project hooks. These scripts are used for static analysis of code changes via grep and other standard Unix utilities. They operate entirely within the local project context and do not perform any network exfiltration, credential access, or privilege escalation.\n- [EXTERNAL_DOWNLOADS]: The skill includes a reference to a local shared library (../../shared/hook-lib.sh) in its scripts. This represents a modular dependency within a project structure rather than a download from a remote or untrusted source.
Audit Metadata