vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and best practice guidelines for React and Next.js development. No malicious behavior, prompt injection, or data exfiltration patterns were detected. The skill explicitly advocates for security best practices, such as authenticating and authorizing Server Actions to prevent unauthorized mutations.
- [DYNAMIC_EXECUTION]: The skill includes an example of using
dangerouslySetInnerHTMLto inject a theme-initialization script. While this React property allows for raw HTML/JS injection, the provided usage is a standard architectural pattern for preventing hydration flicker in SSR applications and does not pose a security risk in this context. - [COMMAND_EXECUTION]: The skill mentions using the
svgoCLI tool (npx svgo) for SVG optimization. This is a common, legitimate developer workflow and does not involve unsafe command injection or execution.
Audit Metadata