Skills
Navigate
skills/orcaqubits/agentic-commerce-skills-plugins/react-patterns/Gen Agent Trust Hub

react-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches live documentation from official project websites for Remix and React.
  • Evidence: Instructions to fetch from https://remix.run/docs/en/main and https://react.dev/reference/react.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external documentation and web search results, which creates a potential surface for indirect prompt injection if the remote content were compromised. However, the specified targets are official, well-known technical documentation sites.
  • Ingestion points: SKILL.md (instructions to fetch external documentation and search shopify.dev via WebSearch).
  • Boundary markers: Absent.
  • Capability inventory: The skill has access to Read, Write, Edit, Bash, Grep, Glob, WebSearch, and WebFetch tools.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM