frontend-dev-guidelines
Warn
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references suspicious and unverifiable Node.js packages including
react-hook-blogand@hookblog/resolversin its code examples (e.g., inresources/complete-examples.md). These packages do not correspond to well-known community libraries and appear to be the result of a faulty automated find-and-replace operation (replacing 'form' with 'blog'). This poses a risk as it could lead an agent or developer to attempt to install non-existent or potentially malicious typosquatted packages. - [SAFE]: The skill primarily references well-known and trusted technology libraries such as React, MUI (@mui/material), TanStack Query (@tanstack/react-query), and TanStack Router (@tanstack/react-router). These are documented neutrally as part of the intended development guidelines.
- [SAFE]: All API endpoint patterns discussed (e.g.,
/blog/*,/projects/*) are relative paths within a typical microservice architecture and do not involve data exfiltration to external or unauthorized domains. - [SAFE]: No obfuscation, hardcoded credentials, or persistence mechanisms were detected in the provided files.
Audit Metadata