vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external libraries and documentation sources, including
better-all,lru-cache, andswr, as well as official Vercel engineering blog posts. These are used to provide developers and agents with the necessary tools and context for performance optimization. - [METADATA_POISONING]: There is a discrepancy between the author field in the skill's YAML metadata ("vercel") and the platform-provided author name ("pedronauck"). However, the content consists of high-quality, legitimate engineering guidelines consistent with the referenced organization's practices, and the author is a recognized figure in the relevant developer community.
- [SAFE]: The skill uses standard React patterns, such as the synchronous injection of scripts via
dangerouslySetInnerHTMLfor theme initialization, to prevent hydration flickering. This is a documented best practice for the specific use case and does not involve the execution of untrusted input.
Audit Metadata