vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is composed exclusively of informational Markdown documents providing technical guidance and code examples. There are no executable scripts (.sh, .py, .js), configuration files granting special permissions, or binaries that could perform actions on the system.
- [EXTERNAL_DOWNLOADS]: The documentation references external libraries and utilities such as
better-all,swr, andlru-cache. These references point to established open-source repositories and official package registries, serving as implementation examples for the performance techniques described. - [INDIRECT_PROMPT_INJECTION]: The skill includes patterns for handling data from sources like
localStorageandcookies. Specifically, therendering-hydration-no-flickerrule demonstrates the use ofdangerouslySetInnerHTMLfor a self-contained script that manages theme transitions. This implementation is provided as a standard technical solution for a common hydration issue and does not introduce a vulnerability into the skill itself.
Audit Metadata