react-best-practices
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- Guideline-Centric Implementation: The skill consists of architectural and coding guidelines for React and Next.js. It operates by providing context and examples for the agent to use when evaluating or generating code, rather than executing automated scripts on the host system.
- Security Best Practices Education: The inclusion of specific rules like
server-auth-actions.mddemonstrates a focus on security by teaching developers to authenticate and authorize Server Actions internally, treating them as public API endpoints. - Standard Library Integration: The skill references well-known and industry-standard libraries such as
swr,lru-cache, andbetter-all(a utility by a known Vercel engineer). These references are appropriate for the performance-focused context of the skill. - DOM Manipulation Context: While the skill documents the use of
dangerouslySetInnerHTMLfor addressing theme flickering (rendering-hydration-no-flicker.md), the implementation is restricted to a synchronous script for locallocalStoragereads, which is a standard pattern for preventing hydration mismatches without introducing external data injection risks. - Infrastructure Alignment: The provided documentation and external references align with the stated author (Vercel) and their established technical ecosystem, representing normal vendor functionality.
Audit Metadata