react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety guidelines was found. The skill strictly provides technical guidance and code examples for React development.
- [DATA_EXFILTRATION]: No sensitive file paths, credential harvesting patterns, or network exfiltration attempts were identified. The network operations described are limited to standard frontend data fetching examples (e.g., React Query).
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted libraries in the React ecosystem, such as Zustand, TanStack Query, and React Hook Form. There are no patterns of downloading and executing untrusted remote scripts.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, such as piped shell commands (e.g., curl | bash) or dynamic execution of remote strings, were found.
- [COMMAND_EXECUTION]: The shell commands provided in the skill are illustrative examples for user interaction (e.g., project optimization commands) and do not perform any hidden or dangerous system operations.
- [OBFUSCATION]: No obfuscation techniques, including Base64 encoding, zero-width characters, or homoglyph attacks, were detected in the text or code samples.
- [SAFE]: The skill follows development best practices, recommending proper state management and performance optimization techniques.
Audit Metadata