vercel-react-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary use case involves an agent reviewing and refactoring React and Next.js source code, which presents a surface for indirect prompt injection if the files being processed contain malicious instructions.
- Ingestion points: The agent ingests source code from React components, Next.js pages, and configuration files as specified in the triggers within
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its own guidelines and instructions that might be embedded within the source code being analyzed.
- Capability inventory: The agent is intended to perform code generation and refactoring, which typically requires write access to the project's filesystem.
- Sanitization: The provided rules do not include recommendations for sanitizing or escaping the content of the files before the agent processes them for refactoring tasks.
Audit Metadata