react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the use of several well-known third-party libraries for performance optimization, including swr, better-all, and lru-cache. These packages are established and widely used within the React ecosystem.
- [COMMAND_EXECUTION]: The documentation includes standard development commands such as pnpm install, pnpm build, and npx svgo for managing the repository and optimizing project assets.
- [DATA_EXFILTRATION]: Several rules provide code examples for accessing the file system (fs.readFile) and browser storage (localStorage). These examples are pedagogical, focusing on performance techniques like hoisting static I/O and data versioning, and do not contain exfiltration logic.
- [INDIRECT_PROMPT_INJECTION]: The skill acts on React and Next.js source code, which is a potential ingestion surface for untrusted data. However, as a documentation-based skill, it does not possess tools that could be misused for malicious actions, resulting in a safe profile.
Audit Metadata