vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of performance guidelines and best practices for React and Next.js applications. It contains educational content and code examples that assist AI agents in writing efficient, scalable web code.
- [METADATA_POISONING]: The skill's metadata identifies the author as 'vercel', whereas the distribution author is 'thongdn-it'. While this creates a naming inconsistency, the content accurately reflects official engineering guidelines and poses no security risk to the user.
- [EXTERNAL_DOWNLOADS]: The skill references standard documentation and well-known open-source libraries such as
swr,lru-cache, andbetter-all. These references are provided for educational context and dependency management within a standard development workflow. - [COMMAND_EXECUTION]: The rule for SVG optimization mentions
npx svgo, a standard utility for reducing asset size. This is a common and safe command in modern web development pipelines. - [DYNAMIC_EXECUTION]: Demonstrates the use of
dangerouslySetInnerHTMLfor a specific, safe implementation of a synchronous theme-initialization script. This is a standard pattern used to prevent visual flickering during the hydration process in SSR applications.
Audit Metadata