vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill contains high-quality technical documentation and performance guidelines for React and Next.js development. The content is strictly educational and architectural in nature, promoting secure and efficient coding patterns.
- [EXTERNAL_DOWNLOADS]: The skill references several reputable open-source libraries and official documentation sources. These include Vercel's official blog for package optimization, React's core documentation, and established libraries such as SWR, LRU-Cache, and Better-All. All referenced domains (vercel.com, react.dev, github.com/shuding, github.com/isaacs) are well-known and trusted.
- [COMMAND_EXECUTION]: The skill suggests using the
svgoCLI tool for optimizing SVG assets. This is a standard industry practice for reducing asset sizes and does not involve suspicious or unauthorized command execution. - [DYNAMIC_EXECUTION]: The skill demonstrates the use of
dangerouslySetInnerHTMLfor a specific, legitimate performance optimization: injecting a synchronous, hardcoded theme-detection script to prevent hydration flickering. This pattern is a documented best practice for managing client-side state (like themes) in Server-Side Rendering (SSR) environments.
Audit Metadata