advanced-react
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and architectural guidance for React development. It does not execute arbitrary code, perform network exfiltration, or access sensitive credentials. It references official React documentation at react.dev, which is a well-known and trusted service.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted project data. 1. Ingestion points: Project source code and configuration files (package.json and lockfiles) as specified in SKILL.md. 2. Boundary markers: None explicitly defined to ignore embedded instructions in the analyzed source code. 3. Capability inventory: The skill is limited to textual analysis and recommendations; no subprocess, file-write, or network-send capabilities are defined in the reference files. 4. Sanitization: No sanitization of project files is mentioned.
Audit Metadata