The Agent Skills Directory

[SAFE]: The skill consists entirely of documentation (Markdown) and TypeScript/JavaScript code examples for React and Next.js optimization. It does not include any executable scripts or automated tools that could perform unauthorized actions on the host system.
[REMOTE_CODE_EXECUTION]: The skill references several external utility libraries in its examples, such as better-all (shuding/better-all) and lru-cache (isaacs/node-lru-cache). These are standard open-source libraries suggested for performance optimization and are not executed by the skill itself.
[METADATA_POISONING]: There is a discrepancy between the author listed in the metadata (vercel) and the distribution context (sanity-io). However, the content explicitly attributes the guidelines to Vercel Engineering, suggesting this is a reference to the source material rather than a deceptive impersonation attempt.
[DYNAMIC_EXECUTION]: The skill documents the use of React's dangerouslySetInnerHTML for a specific performance pattern (synchronizing theme data before hydration). While this is a sensitive React API, the example provided is a standard, safe implementation for preventing hydration flicker.

vercel-react-best-practices