The Agent Skills Directory

[SAFE]: No security issues detected. The skill's instructions and references align with standard React development best practices.
[COMMAND_EXECUTION]: The skill uses npm run lint and npx tsc for code validation. These are standard development operations and do not involve user-controlled input injection into the shell commands.
[DATA_EXFILTRATION]: No network-enabled commands or sensitive file access patterns were identified. The skill's metadata explicitly confirms that network access is not required.
[PROMPT_INJECTION]: The instructions are clear, technical, and focused on code style. No adversarial patterns, such as instructions to ignore safety guardrails or reveal system prompts, were found.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided source code for refactoring. While this represents a data ingestion surface, the lack of network capabilities and the focus on syntax-level refactoring minimize the risk of indirect instruction execution.

paniolo-react-best-practices