The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructions are focused purely on technical implementation and architectural guidelines for React Server Components. No attempts to override agent behavior, bypass safety filters, or extract system prompts were found.
[DATA_EXFILTRATION]: The skill does not contain any commands or code patterns for accessing sensitive files (e.g., .ssh, .env). It explicitly advises developers against placing secrets or database access directly in isomorphic loaders, promoting secure architecture by moving sensitive operations to server-only functions.
[REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of arbitrary scripts from the internet. All code examples use standard library patterns for the TanStack ecosystem.
[OBFUSCATION]: The content is clear and readable. No hidden characters, Base64-encoded commands, homoglyphs, or other obfuscation techniques were detected in the instructions or code examples.
[INDIRECT_PROMPT_INJECTION]: While the skill describes processing user-controlled data such as route parameters (params.postId) and search parameters, it consistently recommends the use of Zod-based validation via the .validator() API to sanitize and validate incoming data before use. This follows security best practices for handling untrusted input.
[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not utilize the dynamic command execution syntax (e.g., !command).
[EXTERNAL_DOWNLOADS]: All external references point to official documentation domains for TanStack and Vite, which are well-known and trusted technology services. No suspicious or untrusted third-party URLs were found.

server-components