setup-react-rules
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to improve project security and code quality by implementing linting hooks that run after file edits or writes.
- [COMMAND_EXECUTION]: The provided scripts (
react-rules-check.sh,tailwind-check.sh) use standard Unix utilities likegrep,git, andechoto inspect code diffs. This execution is local and serves the primary purpose of the skill. - [DATA_EXPOSURE]: There are no indicators of sensitive data exposure or network exfiltration. The scripts read local configuration files like
package.jsonsolely to detect the presence of specific dependencies (e.g., React Compiler or Protobuf) to adjust enforcement rules. - [REMOTE_CODE_EXECUTION]: The skill does not download or execute code from external sources. It relies on local scripts and a shared library reference (
_hook-lib.sh) that is expected to be part of the user's local development environment.
Audit Metadata