vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation, best practice guidelines, and code examples (Incorrect vs. Correct patterns) for React and Next.js performance tuning. It does not contain any executable scripts, automated tool invocations, or command execution patterns.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted external resources, including official documentation for React, Next.js, and Vercel, as well as reputable open-source repositories on GitHub (e.g.,
shuding/better-allandisaacs/node-lru-cache). These references are for documentation and dependency management in the context of the recommended coding patterns. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and refactor user-provided React/Next.js code. While this creates a theoretical attack surface where malicious instructions could be embedded in the code being analyzed, the skill itself does not contain any exploitable capabilities or instructions to bypass safety guardrails. No specific vulnerabilities were identified in how the skill ingests or processes data.
Audit Metadata