vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and code examples in Markdown and JSON formats. No malicious patterns, prompt injections, or unauthorized data access attempts were detected.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted external resources for documentation and utility purposes, including official React (react.dev), Next.js (nextjs.org), SWR (swr.vercel.app), and Vercel (vercel.com) domains. These references are used appropriately to provide further context for the performance guidelines.
- [COMMAND_EXECUTION]: The documentation includes code blocks illustrating common development commands such as
pnpm installandnpx svgo. These are provided as static examples for the user/agent and are not executed automatically by the skill itself. - [METADATA_POISONING]: The skill metadata correctly identifies the author and the technical scope. While the description mentions Vercel Engineering, the content appears to be a curated collection of official performance guidelines intended for educational and automated refactoring use cases.
Audit Metadata