vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown-based documentation and rules for optimizing React and Next.js applications. No executable code, shell scripts, or binaries are included in the skill distribution.
- [SAFE]: The guidelines promote secure development practices, such as emphasizing the importance of authentication and authorization checks inside Next.js Server Actions (documented in
rules/server-auth-actions.md). - [SAFE]: External resources and dependencies mentioned in the guidelines, such as
swr,lru-cache, andbetter-all, are well-known and trusted packages within the web development ecosystem. - [SAFE]: The skill uses
dangerouslySetInnerHTMLin one specific example (rules/rendering-hydration-no-flicker.md) to demonstrate a standard performance pattern for preventing theme flickering; this use case is localized to a hardcoded script and does not present an injection vulnerability.
Audit Metadata