The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were identified in the skill. The provided content consists entirely of documentation and best practices for React performance optimization.
[DATA_EXFILTRATION]: The skill guidelines recommend using standard browser APIs like localStorage and cookies for legitimate UI-state management, such as theme synchronization and client-side result caching. No evidence of unauthorized data access or exfiltration patterns exists.
[EXTERNAL_DOWNLOADS]: The skill mentions common, industry-standard packages such as lru-cache and svgo. These are recognized as trusted utilities within the development ecosystem and do not pose a security risk.
[INDIRECT_PROMPT_INJECTION]: As the skill is intended for agents tasked with reviewing and refactoring React code, it naturally possesses a surface for indirect prompt injection from comments or literals within that code. This is an inherent property of coding assistant skills rather than a malicious defect. Capability inventory: The skill assumes standard agent capabilities for file operations and code review. Boundary markers: No explicit instructions to ignore embedded code instructions are provided. Sanitization: The skill focuses on performance logic rather than input sanitization.

react-best-practices