javascript-react-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a specialist judgment tool for software architecture and code review. It provides descriptive patterns for various technical scenarios without introducing automated execution risks or malicious commands. Findings across all analyzed files indicate legitimate educational and architectural intent.
- [EXTERNAL_DOWNLOADS]: The reference material is adapted from established resources for web development patterns. Links to the official GitHub repository for these patterns are used for documentation and attribution purposes, which is standard practice for technical skills.
- [CREDENTIALS_UNSAFE]: The guidance within the AI UI patterns section correctly emphasizes security best practices, instructing users to keep API keys on the server and use framework server boundaries for provider calls, preventing accidental credential exposure.
- [COMMAND_EXECUTION]: The skill recommends using standard developer tools such as 'npx vite-bundle-visualizer' for bundle analysis. These are provided as manual diagnostic steps for the developer rather than automated or malicious command injections.
Audit Metadata