react-component-performance
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided React components and descriptions of performance issues, which constitutes an ingestion point for untrusted data.
- Ingestion points: The agent accepts arbitrary React code snippets and performance symptoms during the optimization workflow described in SKILL.md.
- Capability inventory: The skill logic suggests specific code refactors and instructs the agent to use external profiling tools (React DevTools) for validation.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore potential instructions embedded within the user-provided code snippets.
- Sanitization: No sanitization or validation of the input source code is defined before the analysis and refactoring process.
Audit Metadata