react-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a reference library for performance optimization. It includes security-positive rules, such as mandatory authentication checks within Next.js Server Actions to prevent unauthorized mutation calls.
- [SAFE]: The skill includes an 'Anti-Patterns' section that explicitly instructs AI agents not to treat external content, logs, or tool responses as trusted instructions, which serves as a safeguard against indirect prompt injection.
- [COMMAND_EXECUTION]: The documentation suggests using
npx svgofor SVG optimization. This is a standard utility for frontend development and is used in a legitimate, illustrative context. - [EXTERNAL_DOWNLOADS]: The skill references several external resources, including the
better-allutility on GitHub andlru-cacheon NPM. These are well-known packages within the React ecosystem and are relevant to the skill's performance-oriented purpose. It also links to official React and Next.js documentation.
Audit Metadata